summaryrefslogtreecommitdiff
path: root/roles/apps/whawty/auth/instance/templates/web.yml.j2
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2023-10-15 23:30:44 +0200
committerChristian Pointner <equinox@spreadspace.org>2023-10-15 23:30:44 +0200
commit217364bf5c612ac0ee1818419e47d4631aa42cfe (patch)
tree548e6b1c78c6805aa01eec21b790115825ee42db /roles/apps/whawty/auth/instance/templates/web.yml.j2
parentvirt module now also depends on lxml python library (diff)
initial version for whawty-auth app (WIP)
Diffstat (limited to 'roles/apps/whawty/auth/instance/templates/web.yml.j2')
-rw-r--r--roles/apps/whawty/auth/instance/templates/web.yml.j213
1 files changed, 13 insertions, 0 deletions
diff --git a/roles/apps/whawty/auth/instance/templates/web.yml.j2 b/roles/apps/whawty/auth/instance/templates/web.yml.j2
new file mode 100644
index 00000000..705e056d
--- /dev/null
+++ b/roles/apps/whawty/auth/instance/templates/web.yml.j2
@@ -0,0 +1,13 @@
+---
+tls:
+ certificate: /config/tls/cert.pem
+ certificate-key: /config/tls/key.pem
+ min-protocol-version: "TLSv1.2"
+ ciphers:
+ - ECDHE_RSA_WITH_AES_128_GCM_SHA256
+ - ECDHE_RSA_WITH_AES_256_GCM_SHA384
+ - ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+ - TLS_AES_128_GCM_SHA256
+ - TLS_AES_256_GCM_SHA384
+ - TLS_CHACHA20_POLY1305_SHA256
+ prefer-server-ciphers: true