Increase security of SSL via OCSP stapling
This commit is contained in:
parent
2abdb9e5a7
commit
9bc37d34ba
|
@ -180,6 +180,7 @@
|
||||||
dnsResolver = "127.0.0.1:53";
|
dnsResolver = "127.0.0.1:53";
|
||||||
group = "nginx";
|
group = "nginx";
|
||||||
webroot = "/var/lib/acme/acme-challenge";
|
webroot = "/var/lib/acme/acme-challenge";
|
||||||
|
ocspMustStaple = true;
|
||||||
};
|
};
|
||||||
certs."coolneng.duckdns.org".extraDomainNames = [
|
certs."coolneng.duckdns.org".extraDomainNames = [
|
||||||
"radicale.coolneng.duckdns.org"
|
"radicale.coolneng.duckdns.org"
|
||||||
|
|
Loading…
Reference in New Issue