Commit df1af62b authored by nanahira's avatar nanahira

better ssl_stapling_verify

parent b4352674
...@@ -156,6 +156,8 @@ http { ...@@ -156,6 +156,8 @@ http {
{{/ports}} {{/ports}}
ssl_certificate {{certsPath}}/{{cert}}/fullchain.pem; ssl_certificate {{certsPath}}/{{cert}}/fullchain.pem;
ssl_certificate_key {{certsPath}}/{{cert}}/privkey.pem; ssl_certificate_key {{certsPath}}/{{cert}}/privkey.pem;
ssl_stapling_verify on;
ssl_trusted_certificate {{certsPath}}/{{cert}}/fullchain.pem;
{{#redirect}} {{#redirect}}
if ($https != "on") { if ($https != "on") {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment