archive/blender-cloud
0
1
Fork 1
Code Issues 24 Pull Requests Projects Releases Wiki Activity

HaProxy: Explicitly configure allowed TLS ciphers

Browse Source
This commit is contained in:
Sybren A. Stüvel
2017-12-13 14:00:51 +01:00
parent 2a35c3e157
commit 5e15185166
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docker/docker-compose.yml
View File

@@ -139,6 +139,9 @@ haproxy:
environment: environment:
- CERT_FOLDER=/certs/ - CERT_FOLDER=/certs/
- TIMEOUT=connect 5s, client 5m, server 10m - TIMEOUT=connect 5s, client 5m, server 10m
- SSL_BIND_CIPHERS=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
- SSL_BIND_OPTIONS=no-sslv3
- EXTRA_GLOBAL_SETTINGS=tune.ssl.default-dh-param 2048
links: links:
- blender_cloud - blender_cloud
# - notifserv # - notifserv