git Service des IN-Ulm e.V. Erkunden Hilfe
Anmelden
ulpeters
/
ejabberd
1
0
Fork 0
Dateien Issues 0 Pull-Requests 0
Struktur: 319cb0a9b4
Branches Tags
ejabberd
/
data
/
conf.d
/
30-tls.yml

30-tls.yml 697 B
Verlauf Originalformat

1234567891011121314151617181920 
  1. # only allow tls1.2 and tls1.3
    2. 

  2. define_macro:
    3. 

  3.   'TLS_CIPHERS': "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256"
    4. 

  4.   'TLS_OPTIONS':
    5. 

  5.     - "no_sslv3"
    6. 

  6.     - "no_tlsv1"
    7. 

  7.     - "no_tlsv1_1"
    8. 

  8.     - "cipher_server_preference"
    9. 

  9.     - "no_compression"
    10. 

  10. 

  11. c2s_ciphers: 'TLS_CIPHERS'
    12. 

  12. s2s_ciphers: 'TLS_CIPHERS'
    13. 

  13. c2s_protocol_options: 'TLS_OPTIONS'
    14. 

  14. s2s_protocol_options: 'TLS_OPTIONS'
    15. 

  15. s2s_use_starttls: required
    16. 

  16. 

  17. certfiles:
    18. 

  18.   - /etc/ssl/ejabberd/fullchain.pem
    19. 

  19.   - /etc/ssl/ejabberd/key.pem
    20. 

  20.