diff --git a/in/public/web/nginx/configure.rst b/in/public/web/nginx/configure.rst index 79b6355..dd3a6ab 100644 --- a/in/public/web/nginx/configure.rst +++ b/in/public/web/nginx/configure.rst @@ -39,7 +39,7 @@ Configure # Security ssl_buffer_size 8k; - ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA,DHE-DSS-AES256-GCM-SHA384,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA256,DHE-DSS-AES256-SHA256,DHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA"; + ssl_ciphers "TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_AES_128_GCM_SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-CHACHA20-POLY1305,ECDHE-ARIA256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ARIA128-GCM-SHA256"; ssl_dhparam /etc/nginx/dhparam; ssl_ecdh_curve secp384r1; ssl_prefer_server_ciphers on;