Fix #1127 - Enable OSCP stapling in webserver (#1132)

internetstandards · Nov 1, 2023 · 2459149 · 2459149
1 parent 4508efd
commit 2459149
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/docker/webserver/nginx_templates/app.conf.template b/docker/webserver/nginx_templates/app.conf.template
@@ -22,6 +22,10 @@ add_header 'X-XSS-Protection' '1; mode=block' always;
 
 root /var/www/internet.nl;
 
+# enable OSCP stapling
+ssl_stapling on;
+ssl_stapling_verify on;
+
 # default server for http, primary used for ACME and https redirect
 server {
     listen       80;