2024-09-17 00:47:41 +02:00
|
|
|
#jinja2: lstrip_blocks: True
|
|
|
|
|
# {{ ansible_managed }}
|
|
|
|
|
|
2025-01-07 22:26:10 +01:00
|
|
|
# SSL Settings
|
|
|
|
|
# generated 2025-01-07, Mozilla Guideline v5.7, nginx 1.22.1 (UNSUPPORTED; end-of-life), OpenSSL 3.0.15, modern config
|
|
|
|
|
# https://ssl-config.mozilla.org/#server=nginx&version=1.22.1&config=modern&openssl=3.0.15&guideline=5.7
|
|
|
|
|
# modern configuration
|
|
|
|
|
ssl_protocols TLSv1.3;
|
|
|
|
|
ssl_ecdh_curve X25519:prime256v1:secp384r1;
|
|
|
|
|
ssl_prefer_server_ciphers off;
|
|
|
|
|
|
|
|
|
|
ssl_session_tickets off;
|
|
|
|
|
|
|
|
|
|
# OCSP stapling
|
|
|
|
|
ssl_stapling on;
|
|
|
|
|
ssl_stapling_verify on;
|
|
|
|
|
|
|
|
|
|
# replace with the IP address of your resolver
|
|
|
|
|
resolver 127.0.0.1;
|
|
|
|
|
|
2024-09-17 00:47:41 +02:00
|
|
|
# Rate limiting
|
|
|
|
|
# https://blog.nginx.org/blog/rate-limiting-nginx
|
|
|
|
|
# https://www.techgrube.de/news-und-infos/nginx-rate-limiting-einstellungen-und-funktion
|
2025-01-07 22:44:03 +01:00
|
|
|
limit_req_zone $binary_remote_addr zone=conn_limit:10m rate=10r/s;
|
2024-09-17 00:47:41 +02:00
|
|
|
|
|
|
|
|
# extras
|
|
|
|
|
server_tokens off;
|
2025-01-05 01:08:19 +01:00
|
|
|
more_set_headers 'Server: UwU';
|
