From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 23 May 2015 15:06:42 +0000 (-0300)
Subject: Nginx: dhparams
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=097b8ec6218cd644f30831d4c948b97ea37b2222;p=puppet-bootstrap.git

Nginx: dhparams
---

diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
index 4e9fa7d..8beff14 100644
--- a/templates/etc/nginx/domain.erb
+++ b/templates/etc/nginx/domain.erb
@@ -111,6 +111,7 @@ server {
   ssl_protocols SSLv3 TLSv1;
   ssl_ciphers HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH;
   ssl_prefer_server_ciphers on;
+  ssl_dhparam /etc/ssl/dhparams/dhparams_2048.pem;
 
   # Set the max size for file uploads
   client_max_body_size 100M;