commit b0586ed4b23826defdb9e79fd6afd24700a37235
parent 8376543cdb8b786565a3499d2837f430f5f56ec6
Author: Florian Dold <florian@dold.me>
Date: Mon, 7 Sep 2026 21:43:58 +0200
remove settings that clash with nginx.conf
Debian already has them in nginx.conf, nginx doesn't allow setting them
twice in the same configuration context
Diffstat:
1 file changed, 0 insertions(+), 2 deletions(-)
diff --git a/roles/webserver/files/etc/nginx/conf.d/http2-http3.conf b/roles/webserver/files/etc/nginx/conf.d/http2-http3.conf
@@ -11,9 +11,7 @@ quic_retry off;
ssl_early_data off;
-ssl_prefer_server_ciphers on;
## Note: session cache is shared across all services on this server
ssl_session_cache shared:TLS:10m;
ssl_dhparam /etc/ssl/private/dhparam.pem;
-ssl_protocols TLSv1.3 TLSv1.2;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';