Merge remote-tracking branch 'refs/remotes/origin/master'

Loudbooks · Dec 8, 2024 · 2d23746 · 2d23746
2 parents d6c7c0d + 0aeae31
commit 2d23746
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -56,9 +56,8 @@ Download `pastebook.conf` [here](https://github.com/Loudbooks/PasteBook/blob/mas
 ### SSL Configuration
 Run the following, with `<DOMAIN>` changed to your domain.
 ```bash
-sudo certbot --nginx -d <DOMAIN> -d api.<DOMAIN>
+sudo certbot certonly --standalone -d <DOMAIN> -d api.<DOMAIN>
 ```
-
 ### Committing Changes
 Run the following.
 ```bash

diff --git a/pastebook.conf b/pastebook.conf
@@ -11,6 +11,13 @@ server {
     listen 443 ssl;
     server_name <DOMAIN>;
 
+    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+
     location / {
         proxy_buffering off;  
         proxy_set_header X-Real-IP $remote_addr;                                                                                                
@@ -33,6 +40,13 @@ server {
     listen 443 ssl;
     server_name api.<DOMAIN>;
 
+    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+
     client_max_body_size 6M;
 
     location / {