Merge pull request #203 from wolfyshy/master
Update Apache configuration a bit
This commit is contained in:
commit
1f202dedc1
|
@ -191,15 +191,26 @@ Setting up Mastodon behind Apache is possible as well, although you will need to
|
||||||
|
|
||||||
DocumentRoot /home/mastodon/live/public/
|
DocumentRoot /home/mastodon/live/public/
|
||||||
|
|
||||||
Header add Strict-Transport-Security "max-age=31536000"
|
Header always set Referrer-Policy "strict-origin-when-cross-origin"
|
||||||
|
Header always set Strict-Transport-Security "max-age=31536000"
|
||||||
|
|
||||||
SSLEngine on
|
SSLEngine on
|
||||||
SSLProtocol -all +TLSv1.2
|
SSLProtocol -all +TLSv1.2
|
||||||
SSLHonorCipherOrder on
|
SSLHonorCipherOrder on
|
||||||
SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH
|
SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH
|
||||||
|
SSLCompression off
|
||||||
|
SSLSessionTickets off
|
||||||
|
SSLStaplingResponderTimeout 5
|
||||||
|
SSLStaplingReturnResponderErrors off
|
||||||
|
SSLUseStapling on
|
||||||
|
|
||||||
SSLCertificateFile example.pem
|
SSLCertificateFile example.pem
|
||||||
SSLCertificateKeyFile example.key
|
SSLCertificateKeyFile example.key
|
||||||
|
|
||||||
|
<Location /assets>
|
||||||
|
Header always set Cache-Control "public, max-age=31536000, immutable"
|
||||||
|
</Location>
|
||||||
|
|
||||||
ProxyPreserveHost On
|
ProxyPreserveHost On
|
||||||
RequestHeader set X-Forwarded-Proto "https"
|
RequestHeader set X-Forwarded-Proto "https"
|
||||||
ProxyPass /500.html !
|
ProxyPass /500.html !
|
||||||
|
|
Loading…
Reference in New Issue