File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -30,17 +30,17 @@ smtpd_tls_mandatory_ciphers = high
3030
3131These security configurations can be added/modified in ` data/conf/nginx/includes/site-defaults.conf ` .
3232
33- ## SSL Ciphers
33+ ### SSL Ciphers
3434
3535Consider only supporting ciphers matching that of TLSv1.3:
3636
3737```
3838ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256";
3939```
4040
41- ## HSTS
41+ ### HSTS
4242
43- Consider adding ` includeSubDomains; ` to the HSTS configuration if all of your services are using HTTPS:
43+ Consider adding ` includeSubDomains; ` and ` preload; ` to the HSTS configuration if all of your services are using HTTPS:
4444
4545```
4646add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
You can’t perform that action at this time.
0 commit comments