mtan93/install-nextcloud
1
0
Fork 0
mirror of https://github.com/mtan93/install-nextcloud.git synced 2026-04-07 14:23:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

ssl improvements

Browse Source 
cosmetical changes to /etc/apt/source.list
and
added the "ssl_early_data" directive to be used with OpenSSL.
This commit is contained in:
rieger::CLOUD
2018-10-25 20:56:30 +02:00
committed by GitHub
parent df2d654726
commit 76dd097128
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
install-nextcloud-arm64.sh
View File

@@ -51,9 +51,9 @@ clear
### START ### ### START ###
cd /usr/local/src cd /usr/local/src
###prepare the server environment ###prepare the server environment
sed -i '$adeb http://nginx.org/packages/mainline/ubuntu/ bionic nginx' /etc/apt/sources.list sed -i '$adeb [arch=arm64] http://nginx.org/packages/mainline/ubuntu/ bionic nginx' /etc/apt/sources.list
sed -i '$adeb-src http://nginx.org/packages/mainline/ubuntu/ bionic nginx' /etc/apt/sources.list sed -i '$adeb-src [arch=arm64] http://nginx.org/packages/mainline/ubuntu/ bionic nginx' /etc/apt/sources.list
sed -i '$adeb http://ftp.hosteurope.de/mirror/mariadb.org/repo/10.3/ubuntu bionic main' /etc/apt/sources.list sed -i '$adeb [arch=arm64] http://ftp.hosteurope.de/mirror/mariadb.org/repo/10.3/ubuntu bionic main' /etc/apt/sources.list
wget http://nginx.org/keys/nginx_signing.key && apt-key add nginx_signing.key wget http://nginx.org/keys/nginx_signing.key && apt-key add nginx_signing.key
apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8 apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8
update_and_clean update_and_clean
@@ -438,6 +438,7 @@ ssl_ecdh_curve secp521r1:secp384r1:prime256v1;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
ssl_early_data on;
EOF EOF
touch /etc/nginx/proxy.conf touch /etc/nginx/proxy.conf
cat <<EOF >/etc/nginx/proxy.conf cat <<EOF >/etc/nginx/proxy.conf
@@ -448,6 +449,7 @@ proxy_set_header X-Forwarded-Protocol \$scheme;
proxy_set_header X-Forwarded-For \$remote_addr; proxy_set_header X-Forwarded-For \$remote_addr;
proxy_set_header X-Forwarded-Port \$server_port; proxy_set_header X-Forwarded-Port \$server_port;
proxy_set_header X-Forwarded-Server \$host; proxy_set_header X-Forwarded-Server \$host;
proxy_set_header Early-Data $ssl_early_data;
proxy_connect_timeout 3600; proxy_connect_timeout 3600;
proxy_send_timeout 3600; proxy_send_timeout 3600;
proxy_read_timeout 3600; proxy_read_timeout 3600;