Installscript

Ready for NGINX 1.15.4 using OpenSSL 1.1.1 and TLSv1.3
This commit is contained in:
rieger::CLOUD
2018-10-02 08:57:59 +02:00
committed by GitHub
parent 79b26930f5
commit baf7db734f

View File

@@ -3,8 +3,9 @@
# https://www.c-rieger.de # https://www.c-rieger.de
# https://github.com/riegercloud # https://github.com/riegercloud
# INSTALL-NEXTCLOUD.SH # INSTALL-NEXTCLOUD.SH
# Version 5.2 AMD64 # Version 6.0
# September, 20th 2018 # OpenSSL 1.1.1, TLSv1.3
# Octobre, 02nd 2018
################################################ ################################################
# Ubuntu 18.04 LTS AMD64 - Nextcloud 14 # Ubuntu 18.04 LTS AMD64 - Nextcloud 14
################################################ ################################################
@@ -437,12 +438,12 @@ ssl_trusted_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_session_timeout 1d; ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m; ssl_session_cache shared:SSL:50m;
ssl_session_tickets off; ssl_session_tickets off;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384'; ssl_ciphers 'TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384';
ssl_ecdh_curve secp521r1:secp384r1:prime256v1; ssl_ecdh_curve secp521r1:secp384r1:prime256v1;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
#ssl_stapling on; ssl_stapling on;
#ssl_stapling_verify on; ssl_stapling_verify on;
EOF EOF
touch /etc/nginx/proxy.conf touch /etc/nginx/proxy.conf
cat <<EOF >/etc/nginx/proxy.conf cat <<EOF >/etc/nginx/proxy.conf