better ssl_stapling_verify

df1af62b · nanahira · b4352674 · df1af62b
Commit df1af62b authored Sep 14, 2022 by nanahira
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

views/nginx.conf.mustache views/nginx.conf.mustache +2 -0

No files found.
--- a/views/nginx.conf.mustache
+++ b/views/nginx.conf.mustache
@@ -156,6 +156,8 @@ http {
      {{/ports}}
      ssl_certificate {{certsPath}}/{{cert}}/fullchain.pem;
      ssl_certificate_key {{certsPath}}/{{cert}}/privkey.pem;
+      ssl_stapling_verify on;
+      ssl_trusted_certificate {{certsPath}}/{{cert}}/fullchain.pem;
      {{#redirect}}
        if ($https != "on") {
          return 301 https://$host$request_uri;