From: nutra-bot <nutradigest@gmail.com>
Date: Thu, 11 Sep 2025 19:36:44 +0000 (+0000)
Subject: OCSP responders disabled by letsencrypt Q3 2025
X-Git-Url: https://git.nutra.tk/v2?a=commitdiff_plain;h=831a9dcc486176a5438ff15c81a01a44ff820905;p=nutratech%2Fvps-root.git

OCSP responders disabled by letsencrypt Q3 2025
---

diff --git a/etc/nginx/conf.d/default.conf b/etc/nginx/conf.d/default.conf
index 25526bc..aaccca5 100644
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -138,10 +138,10 @@ server {
 
   # HSTS
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
-  # OCSP stapling
-  ssl_stapling on;
-  ssl_stapling_verify on;
   ssl_trusted_certificate /etc/ssl/private/ca-certs.pem;
+  # OCSP stapling (NOTE: Responders disabled by letsencrypt as of Q3 2025)
+  #ssl_stapling on;
+  #ssl_stapling_verify on;
 
   # React app (base URL)
   location / {