ISTI-ansible-roles
/
ansible-role-nginx
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ssl cache: better defaults.

This commit is contained in:
Andrea Dell'Amico 2022-03-01 18:55:05 +01:00
parent 7643a73a84
commit 3637b13417
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
defaults/main.yml
View File

@ -13,8 +13,8 @@ nginx_org_modules: []
# enabled: yes # enabled: yes
# See https://mozilla.github.io/server-side-tls/ssl-config-generator/ # See https://mozilla.github.io/server-side-tls/ssl-config-generator/
nginx_ssl_level: intermediate nginx_ssl_level: intermediate
nginx_ssl_session_cache_size: '10m' nginx_ssl_session_cache_size: '8k'
nginx_ssl_session_timeout: '120m' nginx_ssl_session_timeout: '30m'
nginx_strict_transport_security_expire: 15768000 nginx_strict_transport_security_expire: 15768000
nginx_strict_transport_security_include_subdomains: False nginx_strict_transport_security_include_subdomains: False