summaryrefslogtreecommitdiff
path: root/roles/apps/whawty/auth/instance/templates/web.yml.j2
diff options
context:
space:
mode:
Diffstat (limited to 'roles/apps/whawty/auth/instance/templates/web.yml.j2')
-rw-r--r--roles/apps/whawty/auth/instance/templates/web.yml.j213
1 files changed, 13 insertions, 0 deletions
diff --git a/roles/apps/whawty/auth/instance/templates/web.yml.j2 b/roles/apps/whawty/auth/instance/templates/web.yml.j2
new file mode 100644
index 00000000..705e056d
--- /dev/null
+++ b/roles/apps/whawty/auth/instance/templates/web.yml.j2
@@ -0,0 +1,13 @@
+---
+tls:
+ certificate: /config/tls/cert.pem
+ certificate-key: /config/tls/key.pem
+ min-protocol-version: "TLSv1.2"
+ ciphers:
+ - ECDHE_RSA_WITH_AES_128_GCM_SHA256
+ - ECDHE_RSA_WITH_AES_256_GCM_SHA384
+ - ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+ - TLS_AES_128_GCM_SHA256
+ - TLS_AES_256_GCM_SHA384
+ - TLS_CHACHA20_POLY1305_SHA256
+ prefer-server-ciphers: true