equal
deleted
inserted
replaced
31 server { |
31 server { |
32 listen {{nginx_ssl_port}} ssl http2; |
32 listen {{nginx_ssl_port}} ssl http2; |
33 # listen [::]:{{nginx_ssl_port}} ssl ipv6only=on; |
33 # listen [::]:{{nginx_ssl_port}} ssl ipv6only=on; |
34 server_name {{nginx_server_name}}; |
34 server_name {{nginx_server_name}}; |
35 |
35 |
36 ssl_certificate /etc/letsencrypt/live/{{nginx_server_name}}/fullchain.pem; |
36 ssl_certificate {{nginx_ssl_cert}}; |
37 ssl_certificate_key /etc/letsencrypt/live/{{nginx_server_name}}/privkey.pem; |
37 ssl_certificate_key {{nginx_ssl_privkey}}; |
38 include /etc/letsencrypt/options-ssl-nginx.conf; |
38 include /etc/letsencrypt/options-ssl-nginx.conf; |
39 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; |
39 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; |
40 |
40 |
41 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |
41 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |
42 ssl_stapling on; |
42 ssl_stapling on; |