msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 01:17:02 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

Caddyfile: Disable TLS 1.0/1.1

Browse source 
SSL Labs has started capping grades to B for servers that support TLS 1.0 and/or TLS 1.1
so I believe this is finally the time to get rid of these protocols

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-03-29 12:41:31 +05:30
parent e01aa8854c
commit c4bc0c2e56
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Caddyfile
View file

@ -6,6 +6,7 @@
tls { tls {
dns cloudflare dns cloudflare
clients /etc/ssl/caddy/cloudflare-origin-pull-ca.pem clients /etc/ssl/caddy/cloudflare-origin-pull-ca.pem
protocols tls1.2
} }
header / { header / {
Content-Security-Policy " Content-Security-Policy "