| | |
|---|
| | | ssl_session_cache shared:SSL:10m; |
|---|
| | | ssl_session_timeout 1d; |
|---|
| | | |
|---|
| | | resolver 223.5.5.5 119.29.29.29 valid=300s; |
|---|
| | | ssl_stapling on; |
|---|
| | | ssl_stapling_verify on; |
|---|
| | | # 刻意不配 ssl_stapling：Let's Encrypt 的证书已不再包含 OCSP 响应者地址， |
|---|
| | | # 配了只会每次 reload 打一条 "ssl_stapling ignored" 警告，留一行永不生效的配置更容易误导人。 |
|---|
| | | |
|---|
| | | add_header Strict-Transport-Security "max-age=86400" always; |
|---|
| | | |
|---|
| | |
|---|
| | | ssl_prefer_server_ciphers off; |
|---|
| | | ssl_session_cache shared:SSL:10m; |
|---|
| | | ssl_session_timeout 1d; |
|---|
| | | |
|---|
| | | resolver 223.5.5.5 119.29.29.29 valid=300s; |
|---|
| | | ssl_stapling on; |
|---|
| | | ssl_stapling_verify on; |
|---|
| | | |
|---|
| | | include snippets/talent-card-locations.conf; |
|---|
| | | } |
|---|
