From 0efd2e5ebca4844a5bf67d9ee4b87ae0f097880a Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Mon, 7 Jul 2014 21:59:05 +0200
Subject: Add GnuTLS Apache2 snippet.

---
 apache2/conf.d/local-gnutls.conf | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 apache2/conf.d/local-gnutls.conf

diff --git a/apache2/conf.d/local-gnutls.conf b/apache2/conf.d/local-gnutls.conf
new file mode 100644
index 0000000..7c065ed
--- /dev/null
+++ b/apache2/conf.d/local-gnutls.conf
@@ -0,0 +1,8 @@
+GnuTLSEnable on
+GnuTLSSessionTickets on
+GnuTLSPriorities NORMAL
+GnuTLSCertificateFile /etc/ssl/certs/apache2+cacert.org.pem
+GnuTLSKeyFile /etc/ssl/private/apache2.pem
+
+# HSTS: http://www.debian-administration.org/articles/662
+Header add Strict-Transport-Security: "max-age=15768000;includeSubdomains"
-- 
cgit v1.2.3