anpassungen

nginx.conf

@@ -32,6 +32,7 @@ server {
     ssl_certificate /etc/letsencrypt/live/server.schooltech.ch/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/server.schooltech.ch/privkey.pem;
     ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
 
     # Einfach Verbindung schließen für unbekannte Hosts
     return 444;
@@ -63,6 +64,9 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_buffering off;
+        proxy_request_buffering off;
     }
 
     # ------------------------------------------------------------
@@ -82,6 +86,10 @@ server {
 
     # Security
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+
+    # SSL
+    tcp_nopush on;
+    tcp_nodelay on;
 }
 
 # ------------------------------------------------------------