diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2 index 605d2f5..accab37 100644 --- a/roles/nginx/templates/https.j2 +++ b/roles/nginx/templates/https.j2 @@ -6,8 +6,9 @@ ssl_certificate_key {{ tls_key_dir }}/{{ domain_name }}.crt.pem; ssl_session_timeout 5m; - ssl_session_cache shared:SSL:1m; - ssl_buffer_size 1400; # 1400 bytes to fit in one MTU + ssl_session_cache shared:SSL:1m; # 1MB -> 4,000 sessions + ssl_buffer_size 1400; # 1400 bytes to fit in one MTU + ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl_protocols {{ nginx_tls_protocols }}; ssl_ciphers "{{ tls_cipher_suite }}";