16 lines
643 B
Plaintext
16 lines
643 B
Plaintext
ssl_certificate_by_lua_block {
|
|
auto_ssl:ssl_certificate()
|
|
}
|
|
|
|
# You must still define a static ssl_certificate file for nginx to start.
|
|
#
|
|
# You may generate a self-signed fallback with:
|
|
#
|
|
# openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 \
|
|
# -subj '/CN=sni-support-required-for-valid-ssl' \
|
|
# -keyout /etc/ssl/resty-auto-ssl-fallback.key \
|
|
# -out /etc/ssl/resty-auto-ssl-fallback.crt
|
|
ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
|
|
ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
add_header Strict-Transport-Security "max-age=31536000" always; |