AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use more secure default Nginx SSL configuration in Docker image

Browse Source 
Closes #4398
This commit is contained in:
Frédéric Guillot
2020-12-28 14:15:16 -08:00
committed by fguillot
parent 7e6ca66e29
commit e4beacf0f2
1 changed files with 16 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
docker/etc/nginx/nginx.conf
View File

@@ -22,14 +22,22 @@ http {
fastcgi_buffer_size 32k; fastcgi_buffer_size 32k;
server { server {
listen 80; listen 80;
listen 443 ssl http2; listen 443 ssl http2;
ssl_certificate /etc/nginx/ssl/kanboard.crt; server_name localhost;
ssl_certificate_key /etc/nginx/ssl/kanboard.key; index index.php;
server_name localhost; root /var/www/app;
index index.php; client_max_body_size 32M;
root /var/www/app;
client_max_body_size 32M; # https://ssl-config.mozilla.org/#server=nginx&version=1.18.0&config=intermediate&openssl=1.1.1i&hsts=false&ocsp=false&guideline=5.6
ssl_certificate /etc/nginx/ssl/kanboard.crt;
ssl_certificate_key /etc/nginx/ssl/kanboard.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
location / { location / {
try_files $uri $uri/ /index.php$is_args$args; try_files $uri $uri/ /index.php$is_args$args;