Update tls-ciphers.conf

Signed-off-by: Zoey <zoey@z0ey.de>
ZoeyVid · Sep 18, 2024 · 0452af4 · 0452af4
1 parent 373cdcb
commit 0452af4
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/rootfs/usr/local/nginx/conf/conf.d/include/tls-ciphers.conf b/rootfs/usr/local/nginx/conf/conf.d/include/tls-ciphers.conf
@@ -9,9 +9,8 @@ ssl_session_cache shared:SSL:10m;
 ssl_dhparam /etc/tls/dhparam;
 ssl_protocols TLSv1.2 TLSv1.3;
 
+ssl_ecdh_curve x25519_mlkem768:p384_mlkem768:x25519_kyber768:p384_kyber768:x25519:secp384r1;
+
 ssl_prefer_server_ciphers on;
 ssl_conf_command Options PrioritizeChaCha;
 ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-CHACHA20-POLY1305;
-
-
-ssl_ecdh_curve x25519_mlkem768:p384_mlkem768:x25519_kyber768:p384_kyber768:x25519:secp384r1;