tengel/www
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

remove OCSP, deprecated with LE

Browse source
This commit is contained in:
tengel 2025-06-18 19:39:57 -05:00
parent e9fb23d752
commit 38ae8b6382
8 changed files with 0 additions and 119 deletions
Download patch file Download diff file Expand all files Collapse all files

14
etc/nginx/sites-available/xyzzy.ee.conf
View file

@ -20,13 +20,6 @@ server {
# https://ssl-config.mozilla.org/
add_header Strict-Transport-Security "max-age=15724800" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/xyzzy.ee/chain.pem;
resolver 9.9.9.9 8.8.8.8 1.1.1.1;
resolver_timeout 5s;
# https://observatory.mozilla.org
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
@ -58,13 +51,6 @@ server {
# https://ssl-config.mozilla.org/
add_header Strict-Transport-Security "max-age=15724800" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/xyzzy.ee/chain.pem;
resolver 9.9.9.9 8.8.8.8 1.1.1.1;
resolver_timeout 5s;
# https://observatory.mozilla.org
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";