andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update main.yml

Browse Source 
TLSv1.3 should be supported (+security) and soon as possible should be TLSv1.2 EOL.
This commit is contained in:
Karim authored and Martin Schurz committed 2021-11-15 19:23:47 +01:00
1 parent 0c840372d8
commit 96d6b47912
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
roles/nginx_hardening/defaults/main.yml
+1 -1
View File
@@ -23,7 +23,7 @@ nginx_add_header: [
nginx_set_cookie_flag: "* HttpOnly secure"
nginx_ssl_prefer_server_ciphers: "on"
nginx_ssl_protocols: "TLSv1.2"
nginx_ssl_protocols: "TLSv1.2 TLSv1.3"
nginx_ssl_ciphers: "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"
nginx_ssl_session_tickets: "off"
nginx_dh_size: "2048"