Ssl_ciphers nginx

1

Hello

I’d like to suggest improving ssl_ciphers.
It wouldn’t be a bad idea to update to the latest version: TLS Configurator

ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305;
2

Hi,

I agree, that’s a good list for modern clients, but keep in mind that Hestia should support a wide range of different clients that may not support those ciphers, so I think we should be a bit more conservative.

3

Works great on Debian 13.

4

The problem is not the OS, are the clients connecting to Nginx.