/etc/letsencrypt/options-ssl-nginx.conf

options-ssl-nginx.conf

# /etc/letsencrypt/options-ssl-nginx.conf
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 1440m;
ssl_session_cache shared:ssl_session_cache:10m;
ssl_session_tickets off;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';

# 請注意此行可能會跟 /etc/nginx/sites-available/DomainName 裡面的設定重複
ssl_dhparam /etc/nginx/ssl/DomainName/dhparams.pem;
ssl_stapling         on;
ssl_stapling_verify  on;