Differences

This shows you the differences between two versions of the page.

--- webapps:nitter [2021/03/06 03:26] – lucid
+++ webapps:nitter [2021/06/18 16:36] (current) – external edit 127.0.0.1
@@ Line 14: / Line 14: @@
 ====Configure Nginx====
+This configuration will obtain an A+ on Qualy's SSL Labs and Mozilla Observatory.
   sudo vim /etc/nginx/conf.d/nitter.placeholder.domain.conf
 <code>
@@ Line 32: / Line 34: @@
     ssl_ecdh_curve secp384r1;
     ssl_session_tickets off;
-    ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:AES256+EECDH:AES256+EDH:!aNULL';
+    ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:AES256+EECDH:AES256+EDH:!SHA1:!SHA256:!SHA384:!aNULL';
     ssl_prefer_server_ciphers on;
     ssl_protocols TLSv1.3 TLSv1.2;
@@ Line 47: / Line 49: @@
     add_header X-Robots-Tag "none" always;
     add_header X-XSS-Protection "1; mode=block" always;
-    add_header Content-Security-Policy "default-src 'self';" always;
+    add_header Content-Security-Policy "default-src 'self' 'inline-unsafe; script-src 'self' 'inline-unsafe'" always;
     location / {