diff --git a/roles/taiga/templates/taiga-ssl.nginx b/roles/taiga/templates/taiga-ssl.nginx index 2ecead523f..d21c57b46b 100644 --- a/roles/taiga/templates/taiga-ssl.nginx +++ b/roles/taiga/templates/taiga-ssl.nginx @@ -6,7 +6,7 @@ server { ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}/privkey.pem; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256; - # add_header Strict-Transport-Security "max-age=31536000;"; + add_header Strict-Transport-Security "max-age=31536000;"; ssl_session_cache shared:SSL:20m; ssl_session_timeout 180m; ssl_prefer_server_ciphers on;