generate dhparams per server

this way we don't need to save/restore it from the database.
2021-11-16 23:03:16 -08:00
parent c4db0d746d
commit 1c8e699a71
5 changed files with 17 additions and 29 deletions
@@ -87,10 +87,7 @@ server {
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256;
    ssl_prefer_server_ciphers off;

-    # dhparams is generated only after dns setup
-<% if (endpoint !== 'ip' && endpoint !== 'setup') { -%>
    ssl_dhparam /home/yellowtent/platformdata/dhparams.pem;
-<% } -%>
    add_header Strict-Transport-Security "max-age=63072000";

    <% if ( ocsp ) { -%>