feat: set prefer_server_ciphers to on by default

[ci skip]
2017-04-20 20:14:10 -06:00
parent 3fab901097
commit 4abad29b3a
1 changed files with 1 additions and 0 deletions
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -48,6 +48,7 @@ server {
  ssl_certificate     {{ $.APP_SSL_PATH }}/server.crt;
  ssl_certificate_key {{ $.APP_SSL_PATH }}/server.key;
  ssl_protocols       TLSv1.2;
+  ssl_prefer_server_ciphers on;

  keepalive_timeout   70;
  {{ if eq $.SPDY_SUPPORTED "true" }}add_header          Alternate-Protocol  {{ $.NGINX_SSL_PORT }}:npn-spdy/2;{{ end }}