gaja-group
/
server-configs-nginx
mirror of https://github.com/h5bp/server-configs-nginx
2
0
Fork 0
Code Issues Releases Wiki Activity

Add Google Public DNS IPv6 and Cloudflare DNS IP addresses to `resolver` (#229) 

Co-authored-by: Léo Colombaro <git@colombaro.fr>
This commit is contained in:
Pete Cooper 2019-05-15 01:07:47 +01:00 committed by Léo Colombaro
parent e30032165c
commit 28874c33f0
1 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
h5bp/ssl/ocsp_stapling.conf
View File

@ -10,9 +10,25 @@
# https://wiki.mozilla.org/Security/Server_Side_TLS#OCSP_Stapling
# https://tools.ietf.org/html/rfc6066#section-8
# https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_stapling
#
# (1) Use Cloudflare 1.1.1.1 DNS resolver
# https://developers.cloudflare.com/1.1.1.1/setting-up-1.1.1.1/
#
# (2) Use Google 8.8.8.8 DNS resolver
# https://developers.google.com/speed/public-dns/docs/using
#
# (3) Use Dyn DNS resolver
# https://help.dyn.com/internet-guide-setup/
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.8.8 8.8.4.4 216.146.35.35 216.146.36.36 valid=60s;
resolver
# (1)
1.1.1.1 1.0.0.1 [2606:4700:4700::1111] [2606:4700:4700::1001]
# (2)
8.8.8.8 8.8.4.4 [2001:4860:4860::8888] [2001:4860:4860::8844]
# (3)
# 216.146.35.35 216.146.36.36
valid=60s;
resolver_timeout 2s;