gaoxiaopei
/
nginx-proxy-ai
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: 添加 SSL protocols/ciphers 配置，修复浏览器 SSL 不安全提示 

- 添加 ssl_protocols TLSv1.2 TLSv1.3（仅允许安全协议）
- 添加 ssl_ciphers 强加密套件（ECDHE+AESGCM/CHACHA20）
- 添加 ssl_prefer_server_ciphers on（服务端优先选择加密套件）
This commit is contained in:
gitadmin 2026-07-09 15:59:20 +08:00
parent 620d26a60d
commit 35190b493e
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
nginx.conf
View File

@ -43,7 +43,10 @@ http {
gzip_proxied any; gzip_proxied any;
gzip_vary on; gzip_vary on;
# --- SSL 会话缓存 --- # --- SSL 安全配置 ---
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d; ssl_session_timeout 1d;
ssl_session_tickets on; ssl_session_tickets on;