EastonSun

EastonSun / nginx.conf

Created August 27, 2021 02:04 — forked from fotock/nginx.conf

Nginx SSL 安全配置最佳实践.

	# 生成 dhparam.pem 文件, 在命令行执行任一方法:

	# 方法1: 很慢
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	# 方法2: 较快
	# 与方法1无明显区别. 2048位也足够用, 4096更强
	openssl dhparam -dsaparam -out /etc/nginx/ssl/dhparam.pem 4096

EastonSun / nginx.conf

Created December 20, 2020 05:56 — forked from plentz/nginx.conf

Best nginx configuration for improved security(and performance). Complete blog post here http://tautt.com/best-nginx-configuration-for-security/

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048