From c016f98360b940a2bec6f3eff87b3c216927251d Mon Sep 17 00:00:00 2001
From: Vasudev Kamath <vasudev@copyninja.info>
Date: Mon, 2 May 2016 20:49:47 +0530
Subject: Added ssl.conf of my nginx server.

---
 nginx/conf.d/ssl.conf | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 nginx/conf.d/ssl.conf

diff --git a/nginx/conf.d/ssl.conf b/nginx/conf.d/ssl.conf
new file mode 100644
index 0000000..cca9646
--- /dev/null
+++ b/nginx/conf.d/ssl.conf
@@ -0,0 +1,15 @@
+ssl_session_cache shared:SSL:20m;
+ssl_session_timeout 5m;
+
+# This is in nginx.conf
+# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+# ssl_prefer_server_ciphers on;
+ssl_ciphers "ECDH+AESGCM:ECDH+AES256:ECDH+AES128:!ADH:!AECDH:!MD5:!aNULL:!eNULL:!NULL";
+
+ssl_dhparam /etc/nginx/dhparam.pem;
+
+ssl_stapling on;
+ssl_stapling_verify on;
+
+add_header Strict-Transport-Security "max-age=31536000;includeSubdomains";
+
-- 
cgit v1.2.3