summaryrefslogtreecommitdiff
path: root/data/templates/https/nginx.default.tmpl
diff options
context:
space:
mode:
authorJohn Estabrook <jestabro@vyos.io>2021-09-06 10:23:44 -0500
committerGitHub <noreply@github.com>2021-09-06 10:23:44 -0500
commit90b9eeacfb626a82c842815371c32435bdf395a7 (patch)
tree2d609cadeadf4ac2c2a966ee5f489e7589df18ef /data/templates/https/nginx.default.tmpl
parent1fc69810450a306310fc6bf82cd0b2406d029fb2 (diff)
parent7546e249708de3e0b4bf8f89912caf73265edd60 (diff)
downloadvyos-1x-90b9eeacfb626a82c842815371c32435bdf395a7.tar.gz
vyos-1x-90b9eeacfb626a82c842815371c32435bdf395a7.zip
Merge pull request #997 from c-po/nginx-tls-12-13
https: T2230: only support TLS1.2 and TLS1.3
Diffstat (limited to 'data/templates/https/nginx.default.tmpl')
-rw-r--r--data/templates/https/nginx.default.tmpl1
1 files changed, 1 insertions, 0 deletions
diff --git a/data/templates/https/nginx.default.tmpl b/data/templates/https/nginx.default.tmpl
index 2f8aa06c2..9d73baeee 100644
--- a/data/templates/https/nginx.default.tmpl
+++ b/data/templates/https/nginx.default.tmpl
@@ -39,6 +39,7 @@ server {
#
include snippets/snakeoil.conf;
{% endif %}
+ ssl_protocols TLSv1.2 TLSv1.3;
# proxy settings for HTTP API, if enabled; 503, if not
location ~ /(retrieve|configure|config-file|image|generate|show|docs|openapi.json|redoc|graphql) {