* Removed TLSv1 and TLSv1.1

* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves

diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx
index 3cbb675b3247d3370972464f98430ad3018fb2c9..a0a2d9f51471e59aea1d441f103c6568203d3749 100644 (file)
--- a/installation/pleroma.nginx
+++ b/installation/pleroma.nginx
@@ -36,6 +36,7 @@ server {
     ssl_certificate           /etc/letsencrypt/live/example.tld/fullchain.pem;
     ssl_certificate_key       /etc/letsencrypt/live/example.tld/privkey.pem;
 
+    # Add TLSv1.0 to support older devices
     ssl_protocols TLSv1.2;
     # Uncomment line below if you want to support older devices (Before Android 4.4.2, IE 8, etc.)
     # ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";