summaryrefslogtreecommitdiff
path: root/apache2
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2014-07-07 21:59:05 +0200
committerJonas Smedegaard <dr@jones.dk>2014-07-07 21:59:05 +0200
commit0efd2e5ebca4844a5bf67d9ee4b87ae0f097880a (patch)
treec86e5ffa69e3e9b5734d0df5be577d94ac5b4613 /apache2
parentab651d3cbd9909e10dd2ef97d364314b81dbcd14 (diff)
Add GnuTLS Apache2 snippet.
Diffstat (limited to 'apache2')
-rw-r--r--apache2/conf.d/local-gnutls.conf8
1 files changed, 8 insertions, 0 deletions
diff --git a/apache2/conf.d/local-gnutls.conf b/apache2/conf.d/local-gnutls.conf
new file mode 100644
index 0000000..7c065ed
--- /dev/null
+++ b/apache2/conf.d/local-gnutls.conf
@@ -0,0 +1,8 @@
+GnuTLSEnable on
+GnuTLSSessionTickets on
+GnuTLSPriorities NORMAL
+GnuTLSCertificateFile /etc/ssl/certs/apache2+cacert.org.pem
+GnuTLSKeyFile /etc/ssl/private/apache2.pem
+
+# HSTS: http://www.debian-administration.org/articles/662
+Header add Strict-Transport-Security: "max-age=15768000;includeSubdomains"