|
|
@@ -23,6 +23,27 @@ http {
|
|
|
error_log /dev/stderr;
|
|
|
gzip on;
|
|
|
gzip_disable "msie6";
|
|
|
+ gzip_comp_level 5;
|
|
|
+ gzip_min_length 256;
|
|
|
+ gzip_proxied any;
|
|
|
+ gzip_vary on;
|
|
|
+
|
|
|
+ gzip_types
|
|
|
+ application/atom+xml
|
|
|
+ application/javascript
|
|
|
+ application/json
|
|
|
+ application/rss+xml
|
|
|
+ application/vnd.ms-fontobject
|
|
|
+ application/x-font-ttf
|
|
|
+ application/x-web-app-manifest+json
|
|
|
+ application/xhtml+xml
|
|
|
+ application/xml
|
|
|
+ font/opentype
|
|
|
+ image/svg+xml
|
|
|
+ image/x-icon
|
|
|
+ text/css
|
|
|
+ text/plain
|
|
|
+ text/x-component;
|
|
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
|
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
|
Dawid Makowski