16 lines
931 B
Plaintext
16 lines
931 B
Plaintext
|
# HTTPS安全配置
|
|||
|
|
proxy_cookie_path / "/; httponly; secure; SameSite=Lax";
|
|||
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
|
|||
|
|
|
|||
|
|
#SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
|
|||
|
|
ssl_certificate /www/server/panel/ssl/certificate.pem;
|
|||
|
|
ssl_certificate_key /www/server/panel/ssl/privateKey.pem;
|
|||
|
|
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
|||
|
|
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!MD5;
|
|||
|
|
ssl_prefer_server_ciphers on;
|
|||
|
|
ssl_session_cache shared:SSL:1m;
|
|||
|
|
ssl_session_timeout 1m;
|
|||
|
|
add_header Strict-Transport-Security "max-age=31536000";
|
|||
|
|
add_header X-Frame-Options SAMEORIGIN;
|
|||
|
|
error_page 497 https://$http_host$request_uri;
|
|||
|
|
#SSL-END
|