ansible-scripts-home/playbooks/templates/nginx/snippets/security-hardening.conf.j2
2026-04-25 20:29:01 +02:00

13 lines
383 B
Django/Jinja

# ANSIBLE MAINTAINED FILE - DO NOT EDIT MANUALLY
ssl_protocols TLSv1.3;
ssl_ecdh_curve X25519MLKEM768:X25519:prime256v1:secp384r1;
ssl_prefer_server_ciphers off;
ssl_dhparam /etc/nginx/dhparam.pem;
client_max_body_size 512m;
client_body_buffer_size 16k;
large_client_header_buffers 4 16k;
client_body_timeout 30s;
client_header_timeout 30s;
send_timeout 30s;
keepalive_timeout 65s;