Improve Nginx settings for speed and security
chore: Improve Nginx settings for speed and security (#5144)
Improve Nginx settings for speed and securitychoreimprove nginx settings speed security
Committed by KubesDavid
commit message
chore: Improve Nginx settings for speed and security (#5144)
* fix: Fixes #5138
* Move to helper function
* Improve Nginx settings
* chore: set ssl_prefer_server_ciphers to off
ssl_prefer_server_ciphers should be set to `off` in a modern context.
ref: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=modern&openssl=1.1.1k&guideline=5.6
Co-authored-by: Vishnu Narayanan <[email protected]>Editor assessment
The subject states the goal, nginx settings improved for speed and security, and the body does exemplary explanatory work: it traces one change to its reason, ssl_prefer_server_ciphers set to off because a modern context calls for it, and links the Mozilla SSL configuration generator as the authority, so a reader learns both the decision and its source. That is genuine, checkable rationale, not a change list. Chore is the accurate type for server configuration. Co-authored-by is well formed. An exemplar worth featuring.