feat: 网站 HTTPS 配置增加阻止 IP 访问 TLS 握手 (#1118)

Refs https://github.com/1Panel-dev/1Panel/issues/849
This commit is contained in:
zhengkunwang223 2023-05-23 19:02:02 +08:00 committed by GitHub
parent 7596099aa1
commit 13abe8cb66
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -5,6 +5,7 @@ ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AE
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_reject_handshake on;
add_header Strict-Transport-Security "max-age=31536000";
error_page 497 https://$host$request_uri;
proxy_set_header X-Forwarded-Proto https;