From 4211410fded71367bd6386c972c82aa1864f614a Mon Sep 17 00:00:00 2001 From: xqzr <34030394+xqzr@users.noreply.github.com> Date: Sat, 5 Jun 2021 17:32:30 +0800 Subject: [PATCH] [gRPC/Nginx] Update TLS Config (#35) --- VLESS-GRPC/README.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/VLESS-GRPC/README.md b/VLESS-GRPC/README.md index fcc937a..1a6dcd1 100644 --- a/VLESS-GRPC/README.md +++ b/VLESS-GRPC/README.md @@ -5,7 +5,7 @@ Xray client <--- gRPC(TLS) ---> Caddy2 <--- gRPC(cleartext) ---> Xray server ## Nginx: -同时,您也可以选择使用 Nginx。示例配置片段如下(来自 [@xqzr](https://github.com/xqzr)): +同时,您也可以选择使用 Nginx。示例配置片段如下(部分来自 [@xqzr](https://github.com/xqzr)): ```conf server { listen 443 ssl http2; @@ -14,8 +14,10 @@ server { index index.html; root /var/www/html; - ssl_certificate /path/to/example.cer ; - ssl_certificate_key /path/to/example.key ; + ssl_certificate /path/to/example.cer; + ssl_certificate_key /path/to/example.key; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; # 在 location 后填写 /{你的 ServiceName} location /x {