wmantly
2665e7d466
- host.remove() now deletes the cert under the host key instead of the Domain relation object, so certs are actually removed from redis - targetinfo.lua returns the redis connection to the pool via set_keepalive instead of leaking one connection per request - autossl.conf drops TLSv1/1.1 and 3DES, adds TLSv1.3 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
20 lines
483 B
Plaintext
20 lines
483 B
Plaintext
listen 443 ssl http2;
|
|
listen 4443 ssl;
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers on;
|
|
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!3DES:!MD5;
|
|
|
|
ssl_certificate_by_lua_block {
|
|
auto_ssl:ssl_certificate()
|
|
}
|
|
|
|
location /.well-known/acme-challenge/ {
|
|
content_by_lua_block {
|
|
auto_ssl:challenge_server()
|
|
}
|
|
}
|
|
|
|
ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
|
|
ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;
|