Caddyfile: Disable TLS 1.0/1.1

SSL Labs has started capping grades to B for servers that support TLS 1.0 and/or TLS 1.1
so I believe this is finally the time to get rid of these protocols

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-03-29 12:41:31 +05:30
parent e01aa8854c
commit c4bc0c2e56
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80

View file

@ -6,6 +6,7 @@
tls {
dns cloudflare
clients /etc/ssl/caddy/cloudflare-origin-pull-ca.pem
protocols tls1.2
}
header / {
Content-Security-Policy "