forked from Hakase/nginx-build
Fix nginx.conf settings.
This commit is contained in:
+5
-3
@@ -52,12 +52,14 @@ http {
|
|||||||
real_ip_header CF-Connecting-IP;
|
real_ip_header CF-Connecting-IP;
|
||||||
|
|
||||||
# SSL Config
|
# SSL Config
|
||||||
strict_sni on;
|
## Strict SNI must use fake server.
|
||||||
strict_sni_header on;
|
strict_sni off;
|
||||||
|
## Strict SNI Header must use 'strict_sni'.
|
||||||
|
strict_sni_header off;
|
||||||
ssl_dyn_rec_enable on;
|
ssl_dyn_rec_enable on;
|
||||||
ssl_early_data on;
|
ssl_early_data on;
|
||||||
|
|
||||||
## SSL OCSP Stapling
|
# SSL OCSP Stapling
|
||||||
resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
|
resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
|
||||||
resolver_timeout 15s;
|
resolver_timeout 15s;
|
||||||
ssl_stapling on;
|
ssl_stapling on;
|
||||||
|
|||||||
Reference in New Issue
Block a user