move TLS configuration into nginx.conf

2020-11-14 04:05:35 -05:00
parent 68b323b8d5
commit dbee9a704c
3 changed files with 31 additions and 16 deletions
--- a/nginx/snippets/https.conf
+++ b/nginx/snippets/https.conf
@@ -1,13 +0,0 @@
-listen 443 ssl http2;
-listen [::]:443 ssl http2;
-
-ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
-ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
-include /etc/letsencrypt/options-ssl-nginx.conf;
-ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
-
-ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
-ssl_stapling on;
-ssl_stapling_verify on;
-# maintained by certbot-ocsp-fetcher
-ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der;