anpassungen

This commit is contained in:
ChK
2026-02-14 10:37:10 +01:00
parent b50911b9b4
commit e1d3a0dbbc
2 changed files with 9 additions and 1 deletions

View File

@@ -18,4 +18,4 @@ controller.server.schooltech.ch = /var/www/certbot
portainer.server.schooltech.ch = /var/www/certbot portainer.server.schooltech.ch = /var/www/certbot
simulation3a29.server.schooltech.ch = /var/www/certbot simulation3a29.server.schooltech.ch = /var/www/certbot
[acme_renewal_info] [acme_renewal_info]
ari_retry_after = 2026-02-07T08:36:28 ari_retry_after = 2026-02-14T07:10:40

View File

@@ -32,6 +32,7 @@ server {
ssl_certificate /etc/letsencrypt/live/server.schooltech.ch/fullchain.pem; ssl_certificate /etc/letsencrypt/live/server.schooltech.ch/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/server.schooltech.ch/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/server.schooltech.ch/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
# Einfach Verbindung schließen für unbekannte Hosts # Einfach Verbindung schließen für unbekannte Hosts
return 444; return 444;
@@ -63,6 +64,9 @@ server {
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_buffering off;
proxy_request_buffering off;
} }
# ------------------------------------------------------------ # ------------------------------------------------------------
@@ -82,6 +86,10 @@ server {
# Security # Security
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
# SSL
tcp_nopush on;
tcp_nodelay on;
} }
# ------------------------------------------------------------ # ------------------------------------------------------------