Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / 9588357db25323fb9cf8e507930012d80d5eb3b0 / . / nginx / server / proxy / ssl.yml
blob: 66a1938350d13e3795050550fc23e457bdd8d3a7 [file] [log] [blame]
Mykyta Karpin6dc8dab2018-07-31 16:54:12 +0300[diff] [blame]1parameters:
2 _param:
3 nginx_proxy_ssl_enabled: false
4 nginx_proxy_ssl:
5 mode: 'strict'
6 enabled: ${_param:nginx_proxy_ssl_enabled}
7 engine: salt
8 dhparam:
9 enabled: True
10 numbits: 2048
11 ecdh_curve:
12 secp521r1:
13 name: 'secp521r1'
14 enabled: True
15 prefer_server_ciphers: "on"
16 protocols:
17 TLSv1:
18 name: 'TLSv1'
19 enabled: True
20 TLSv1.1:
21 name: 'TLSv1.1'
22 enabled: True
23 TLSv1.2:
24 name: 'TLSv1.2'
25 enabled: True
26 stapling: "on"
27 stapling_verify: "on"
28 ciphers:
29 ECDHE-ECDSA-CHACHA20-POLY1305:
30 name: 'ECDHE-ECDSA-CHACHA20-POLY1305'
31 enabled: True
32 ECDHE-RSA-CHACHA20-POLY1305:
33 name: 'ECDHE-RSA-CHACHA20-POLY1305'
34 enabled: True
35 ECDHE-ECDSA-AES128-GCM-SHA256:
36 name: 'ECDHE-ECDSA-AES128-GCM-SHA256'
37 enabled: True
38 ECDHE-RSA-AES128-GCM-SHA256:
39 name: 'ECDHE-RSA-AES128-GCM-SHA256'
40 enabled: True
41 ECDHE-ECDSA-AES256-GCM-SHA384:
42 name: 'ECDHE-ECDSA-AES256-GCM-SHA384'
43 enabled: True
44 ECDHE-RSA-AES256-GCM-SHA384:
45 name: 'ECDHE-RSA-AES256-GCM-SHA384'
46 enabled: True
47 DHE-RSA-AES128-GCM-SHA256:
48 name: 'DHE-RSA-AES128-GCM-SHA256'
49 enabled: True
50 DHE-RSA-AES256-GCM-SHA384:
51 name: 'DHE-RSA-AES256-GCM-SHA384'
52 enabled: True
53 ECDHE-ECDSA-AES128-SHA256:
54 name: 'ECDHE-ECDSA-AES128-SHA256'
55 enabled: True
56 ECDHE-RSA-AES128-SHA256:
57 name: 'ECDHE-RSA-AES128-SHA256'
58 enabled: True
59 ECDHE-ECDSA-AES128-SHA:
60 name: 'ECDHE-ECDSA-AES128-SHA'
61 enabled: True
62 ECDHE-RSA-AES256-SHA384:
63 name: 'ECDHE-RSA-AES256-SHA384'
64 enabled: True
65 ECDHE-RSA-AES128-SHA:
66 name: 'ECDHE-RSA-AES128-SHA'
67 enabled: True
68 ECDHE-ECDSA-AES256-SHA384:
69 name: 'ECDHE-ECDSA-AES256-SHA384'
70 enabled: True
71 ECDHE-ECDSA-AES256-SHA:
72 name: 'ECDHE-ECDSA-AES256-SHA'
73 enabled: True
74 ECDHE-RSA-AES256-SHA:
75 name: 'ECDHE-RSA-AES256-SHA'
76 enabled: True
77 DHE-RSA-AES128-SHA256:
78 name: 'DHE-RSA-AES128-SHA256'
79 enabled: True
80 DHE-RSA-AES128-SHA:
81 name: 'DHE-RSA-AES128-SHA'
82 enabled: True
83 DHE-RSA-AES256-SHA256:
84 name: 'DHE-RSA-AES256-SHA256'
85 enabled: True
86 DHE-RSA-AES256-SHA:
87 name: 'DHE-RSA-AES256-SHA'
88 enabled: True
89 ECDHE-ECDSA-DES-CBC3-SHA:
90 name: 'ECDHE-ECDSA-DES-CBC3-SHA'
91 enabled: True
92 ECDHE-RSA-DES-CBC3-SHA:
93 name: 'ECDHE-RSA-DES-CBC3-SHA'
94 enabled: True
95 EDH-RSA-DES-CBC3-SHA:
96 name: 'EDH-RSA-DES-CBC3-SHA'
97 enabled: True
98 AES128-GCM-SHA256:
99 name: 'AES128-GCM-SHA256'
100 enabled: True
101 AES256-GCM-SHA384:
102 name: 'AES256-GCM-SHA384'
103 enabled: True
104 AES128-SHA256:
105 name: 'AES128-SHA256'
106 enabled: True
107 AES256-SHA256:
108 name: 'AES256-SHA256'
109 enabled: True
110 AES256-SHA:
111 name: 'AES256-SHA'
112 enabled: True
113 AES128-SHA:
114 name: 'AES128-SHA'
115 enabled: True
116 DES-CBC3-SHA:
117 name: 'DES-CBC3-SHA'
118 enabled: True
119 removeDSS:
120 name: '!DSS'
121 enabled: True