From 4abad29b3acf621c2958efdf48ae23ebbdb44239 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <josegonzalez@users.noreply.github.com>
Date: Thu, 20 Apr 2017 20:14:10 -0600
Subject: [PATCH] feat: set prefer_server_ciphers to on by default

[ci skip]
---
 plugins/nginx-vhosts/templates/nginx.conf.sigil | 1 +
 1 file changed, 1 insertion(+)

diff --git a/plugins/nginx-vhosts/templates/nginx.conf.sigil b/plugins/nginx-vhosts/templates/nginx.conf.sigil
index d1c6bb468..cfc537377 100644
--- a/plugins/nginx-vhosts/templates/nginx.conf.sigil
+++ b/plugins/nginx-vhosts/templates/nginx.conf.sigil
@@ -48,6 +48,7 @@ server {
   ssl_certificate     {{ $.APP_SSL_PATH }}/server.crt;
   ssl_certificate_key {{ $.APP_SSL_PATH }}/server.key;
   ssl_protocols       TLSv1.2;
+  ssl_prefer_server_ciphers on;
 
   keepalive_timeout   70;
   {{ if eq $.SPDY_SUPPORTED "true" }}add_header          Alternate-Protocol  {{ $.NGINX_SSL_PORT }}:npn-spdy/2;{{ end }}