28 lines
718 B
Plaintext
28 lines
718 B
Plaintext
|
include conf.d/ssl/*.conf;
|
||
|
|
|
||
|
|
## lowering from 16k to 4k to improve time-to-first-byte
|
||
|
|
ssl_buffer_size 4k;
|
||
|
|
|
||
|
|
{%- if env.NGX_HTTP_SSL_PROFILE %}
|
||
|
|
include snip.d/ssl-{{ env.NGX_HTTP_SSL_PROFILE }};
|
||
|
|
{%- endif %}
|
||
|
|
|
||
|
|
{%- if j2cfg.tls.stapling.enable %}
|
||
|
|
ssl_stapling on;
|
||
|
|
{%- if j2cfg.tls.stapling.verify %}
|
||
|
|
ssl_stapling_verify on;
|
||
|
|
{%- else %}
|
||
|
|
ssl_stapling_verify off;
|
||
|
|
{%- endif %}
|
||
|
|
{%- if j2cfg.tls.stapling.file %}
|
||
|
|
{#- TODO: precise quotation #}
|
||
|
|
ssl_stapling_file {{ j2cfg.tls.stapling.file.__repr__() }};
|
||
|
|
{%- endif %}
|
||
|
|
{%- if j2cfg.tls.stapling.responder %}
|
||
|
|
{#- TODO: precise quotation #}
|
||
|
|
ssl_stapling_responder {{ j2cfg.tls.stapling.responder.__repr__() }};
|
||
|
|
{%- endif %}
|
||
|
|
{%- else %}
|
||
|
|
ssl_stapling off;
|
||
|
|
{%- endif %}
|