Update pastebook.conf

Loudbooks · Dec 7, 2024 · 3dbb7e7 · 3dbb7e7
1 parent c996b04
commit 3dbb7e7
Showing 1 changed file with 16 additions and 8 deletions.
diff --git a/pastebook.conf b/pastebook.conf
@@ -8,19 +8,23 @@ server {
 }
 
 server {
-    listen 443;
+    listen 443 ssl;
     server_name <DOMAIN>;
 
+    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+   	ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+
     location / {
         proxy_buffering off;  
         proxy_set_header X-Real-IP $remote_addr;                                                                                                
         proxy_set_header X-Forwarded-Host $host;                                                                                                
         proxy_set_header X-Forwarded-Port $server_port;                                                                                         
         proxy_pass http://localhost:3000/;   
     }
-
-    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
 }
 
 server {
@@ -33,9 +37,16 @@ server {
 }
 
 server {
-    listen 443;
+    listen 443 ssl;
     server_name api.<DOMAIN>;
 
+    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+   	ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+
     client_max_body_size 6M;
 
     location / {
@@ -45,7 +56,4 @@ server {
         proxy_set_header X-Forwarded-Port $server_port;                                                                                         
         proxy_pass http://localhost:8080/;   
     }
-
-    ssl_certificate /etc/letsencrypt/live/<DOMAIN>/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/<DOMAIN>/privkey.pem;
 }