From 9e021f889f0e157147885c4460b24d7a8a3892d0 Mon Sep 17 00:00:00 2001
From: Jose Diaz-Gonzalez <josegonzalez@users.noreply.github.com>
Date: Thu, 20 Apr 2017 20:17:43 -0600
Subject: [PATCH] fix: disable ssl tickets

This makes Perfect Forward Secrecy useless.
---
 plugins/nginx-vhosts/install | 1 +
 1 file changed, 1 insertion(+)

diff --git a/plugins/nginx-vhosts/install b/plugins/nginx-vhosts/install
index afb5074ca..498507cf5 100755
--- a/plugins/nginx-vhosts/install
+++ b/plugins/nginx-vhosts/install
@@ -36,6 +36,7 @@ server_tokens off;
 # Settings from https://mozilla.github.io/server-side-tls/ssl-config-generator/
 ssl_session_cache shared:SSL:20m;
 ssl_session_timeout 1d;
+ssl_session_tickets on;
 
 ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;