hoellen/dockerfiles
1
0
Fork 0
mirror of https://github.com/hoellen/dockerfiles.git synced 2025-07-02 07:05:42 +00:00
Code Issues Projects Releases Wiki Activity

reverse: add certificate transprency support

Browse Source
This commit is contained in:
root
2017-09-18 19:50:56 +02:00
parent c8ca237ca7
commit 3ade350cd8
5 changed files with 40 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
reverse/rootfs/nginx/conf.d/ct.conf Normal file
View File

@ -0,0 +1,2 @@
ssl_ct on;
add_header Expect-CT "enforce; max-age=86400";

2
reverse/rootfs/nginx/sites-enabled/template_ssl
View File

@ -15,10 +15,12 @@ server {
ssl_certificate /nginx/ssl/certificates/<frontend_domain>.crt;
ssl_certificate_key /nginx/ssl/certificates/<frontend_domain>.key;
ssl_trusted_certificate /nginx/ssl/certificates/<frontend_domain>.chain.pem;
ssl_ct_static_scts /nginx/ssl/timestamps/<frontend_domain>;
include /nginx/conf.d/ssl.conf;
include /nginx/conf.d/headers.conf;
include /nginx/conf.d/hsts.conf;
include /nginx/conf.d/ocsp.conf;
include /nginx/conf.d/ct.conf;
include /nginx/path.d/<frontend_domain>/*.conf;