Set ssl_protocols to TLSv1.2 and TLSv1.3

2021-02-09 01:10:38 +01:00 · 2021-02-09 01:10:38 +01:00 · ac6bff1e72
parent 9440abe704
commit ac6bff1e72
1 changed files with 6 additions and 0 deletions
--- a/roles/nginx/tasks/main.yml
+++ b/roles/nginx/tasks/main.yml
@ -29,6 +29,12 @@
      mode: 0640
    notify: systemctl reload nginx

+  - name: set ssl_protocols to TLSv1.2 TLSv1.3
+    lineinfile:
+      path: /etc/nginx/nginx.conf
+      regexp: "^(.*)ssl_protocols"
+      line: "\tssl_protocols TLSv1.2 TLSv1.3;"
+
  - import_tasks: create-vhosts.yml

  become: "{{ nginx_become }}"