enable some old ciphers in nginx

diff --git a/etc/nginx/sites-available/default b/etc/nginx/sites-available/default
index 3c6c5413c403694fd111acf35756be621f9355f1..fefa7a22f65e0c612b067d0777d28d8655d6e111 100644 (file)
--- a/etc/nginx/sites-available/default
+++ b/etc/nginx/sites-available/default
@@ -10,6 +10,8 @@ server {
   # listen [::]:80 ipv6only=on;
   listen 443 ssl http2 default_server;
   listen [::]:443 ssl ipv6only=on; # managed by Certbot
+  # ssl_protocols TLSv1 TLSv1.1; # support legacy browsers
+  # ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
 
   client_max_body_size 50m;