equal
deleted
inserted
replaced
24 # listen [::]:{{nginx_ssl_port}} ssl ipv6only=on; |
24 # listen [::]:{{nginx_ssl_port}} ssl ipv6only=on; |
25 server_name {{nginx_server_name}}; |
25 server_name {{nginx_server_name}}; |
26 |
26 |
27 ssl_certificate {{nginx_ssl_cert}}; |
27 ssl_certificate {{nginx_ssl_cert}}; |
28 ssl_certificate_key {{nginx_ssl_privkey}}; |
28 ssl_certificate_key {{nginx_ssl_privkey}}; |
29 include /etc/letsencrypt/options-ssl-nginx.conf; |
29 # include /etc/letsencrypt/options-ssl-nginx.conf; |
30 # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; |
30 # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; |
31 |
31 |
32 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |
32 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |
33 ssl_stapling on; |
33 ssl_stapling on; |
34 ssl_stapling_verify on; |
34 ssl_stapling_verify on; |