ansible-taler-exchange

commit 1a04dd028b39c37995877428870fbc1348688ca7
parent 7bbf26b9e9646b3ea968f46bef561085ecc126f7
Author: Florian Dold <florian@dold.me>
Date:   Mon,  7 Sep 2026 21:30:48 +0200

comment in TLS settings

Issue: https://bugs.taler.net/n/11677

Diffstat:
M
roles/webserver/files/etc/nginx/conf.d/http2-http3.conf
 | 
17
+++++------------

1 file changed, 5 insertions(+), 12 deletions(-)
diff --git a/roles/webserver/files/etc/nginx/conf.d/http2-http3.conf b/roles/webserver/files/etc/nginx/conf.d/http2-http3.conf
@@ -11,16 +11,9 @@ quic_retry off;
 
 ssl_early_data off;
 
-# FIXME: comment-in later, upgrade fails if we put this immediately,
-# we need to run once without, otherwise nginx will see these
-# directives twice in different places and the setup script will fail.
-# NOTE: remove the above comment AND the commented out lines
-# below once spec has been updated once -- then update immediately
-# again!
-
-# ssl_prefer_server_ciphers on;
+ssl_prefer_server_ciphers on;
 ## Note: session cache is shared across all services on this server
-# ssl_session_cache shared:TLS:10m;
-# ssl_dhparam /etc/ssl/private/dhparam.pem;
-# ssl_protocols TLSv1.3 TLSv1.2;
-# ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+ssl_session_cache shared:TLS:10m;
+ssl_dhparam /etc/ssl/private/dhparam.pem;
+ssl_protocols TLSv1.3 TLSv1.2;
+ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';