|
|
@ -61,7 +61,11 @@ http |
|
|
|
aio threads; |
|
|
|
|
|
|
|
# tls dynamic records patch directive |
|
|
|
ssl_dyn_rec_enable on; |
|
|
|
ssl_dyn_rec_enable on; |
|
|
|
ssl_dyn_rec_size_hi 4229; |
|
|
|
ssl_dyn_rec_size_lo 1369; |
|
|
|
ssl_dyn_rec_threshold 40; |
|
|
|
ssl_dyn_rec_timeout 1000; |
|
|
|
|
|
|
|
# nginx-vts-status module |
|
|
|
vhost_traffic_status_zone; |
|
|
@ -80,6 +84,10 @@ http |
|
|
|
## |
|
|
|
# SSL Settings |
|
|
|
## |
|
|
|
|
|
|
|
# SSL Early Data |
|
|
|
ssl_early_data off; |
|
|
|
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.3; |
|
|
|
ssl_ciphers 'TLS13+AESGCM+AES128:EECDH+AES128'; |
|
|
|
ssl_prefer_server_ciphers on; |
|
|
|