fix(nginx): ssl_stapling should be off with Let's Encrypt

Signed-off-by: Thomas MICHEL <12149036+michel-thomas@users.noreply.github.com>
This commit is contained in:
Thomas MICHEL
2025-09-05 12:11:02 +02:00
committed by backportbot[bot]
parent 5140cbfb81
commit e45abfb974

View File

@@ -20,6 +20,8 @@ NGINX configuration
- Adjust the :code:`ssl_certificate` and :code:`ssl_certificate_key` directives to the real paths for your signed
certificate and private key. Make sure your SSL certificates are readable by the nginx server process (see `nginx HTTPS SSL
Module documentation <https://wiki.nginx.org/HttpSslModule>`_).
- If using Let's Encrypt as TLS certificate and nginx as webserver, set `ssl_stapling` and `ssl_stapling_verify` to `off`
in main nginx config (see [Let's Encrypt blog post](https://letsencrypt.org/2024/12/05/ending-ocsp)).
- Be careful about line breaks if you copy the examples, as long lines may be
broken for page display and result in an invalid configuration files.
- Some environments might need a ``cgi.fix_pathinfo`` set to ``1`` in their