debian/config-dir/conf-available/modern-ssl.conf


1
2
3
4
5
6
7
8
9

# /etc/apache2/conf-available/modern-ssl.conf

<IfModule mod_ssl.c>
	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM
	SSLCompression off
	SSLHonorCipherOrder on
	SSLOpenSSLConfCmd Curves X25519:prime256v1
	SSLProtocol -all +TLSv1.3 +TLSv1.2
</IfModule>