diff --git a/templates/nginx.conf.j2 b/templates/nginx.conf.j2 index 379e19cb186ff7aafa918301aa24c499ee6591fd..ecd6b9c7c74c19826644ccefbdd85c1d13b293f8 100644 --- a/templates/nginx.conf.j2 +++ b/templates/nginx.conf.j2 @@ -29,10 +29,10 @@ http { ## # SSL Settings + # keep an eye on: https://cipherli.st/ and https://www.ssllabs.com/ssltest/analyze.html?d={{ otree_domain }} ## - ssl_dhparam /etc/nginx/dhparam.pem; - # assumes command: openssl dhparam -out /etc/nginx/dhparam.pem 4096 + # assumes command executed: openssl dhparam -out /etc/nginx/dhparam.pem 4096 ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1 TLSv1;