From cfbb6752eef8eec5cd21ec2fe96a105fc763ff3c Mon Sep 17 00:00:00 2001 From: Zoey Date: Sat, 11 Mar 2023 14:32:25 +0100 Subject: [PATCH] nginx reverse proxy docs: disable 0-rtt 0-rtt is not recommended by internet.nl Signed-off-by: Zoey --- reverse-proxy.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/reverse-proxy.md b/reverse-proxy.md index f7d52abb..fbc5f7d8 100644 --- a/reverse-proxy.md +++ b/reverse-proxy.md @@ -272,7 +272,6 @@ server { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Port $server_port; - proxy_set_header Early-Data $ssl_early_data; proxy_set_header X-Forwarded-Scheme $scheme; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Real-IP $remote_addr; @@ -292,7 +291,6 @@ server { ssl_certificate /etc/letsencrypt/live//fullchain.pem; # managed by certbot on host machine ssl_certificate_key /etc/letsencrypt/live//privkey.pem; # managed by certbot on host machine - ssl_early_data on; ssl_session_timeout 1d; ssl_session_cache shared:MozSSL:10m; # about 40000 sessions ssl_session_tickets off;