theta42/proxy
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix cert deletion key and harden nginx SSL/redis handling

Browse Source 
- host.remove() now deletes the cert under the host key instead of the
  Domain relation object, so certs are actually removed from redis
- targetinfo.lua returns the redis connection to the pool via
  set_keepalive instead of leaking one connection per request
- autossl.conf drops TLSv1/1.1 and 3DES, adds TLSv1.3

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
William Mantly
2026-07-03 01:29:43 -04:00
parent 59bba8273a
commit 2665e7d466
3 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ops/nginx_conf/autossl.conf
+2 -2
View File
@@ -1,9 +1,9 @@
listen 443 ssl http2;
listen 4443 ssl;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!3DES:!MD5;
ssl_certificate_by_lua_block {
auto_ssl:ssl_certificate()