dropped TLSv1.2 in nginx streams

Cielquan · Nov 6, 2019 · 0ab8f5f · 0ab8f5f
1 parent 012b7a0
commit 0ab8f5f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nginx-docker/templates/dns-over-tls.conf.template b/nginx-docker/templates/dns-over-tls.conf.template
@@ -4,8 +4,8 @@ server {
         include snippets/cert_DOMAIN.conf;
         ssl_dhparam             /etc/nginx/dhparam.pem;
 
-        ssl_protocols           TLSv1.2 TLSv1.3;
-        ssl_ciphers             HIGH:!aNULL:!MD5;
+        ssl_protocols           TLSv1.3;
+        ssl_ciphers             ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256;
         ssl_handshake_timeout   10s;
         ssl_session_cache       shared:DoT:20m;
         ssl_session_timeout     4h;