Skip to content

Nginx: modernise TLS config

Jörg Behrmann requested to merge behrmann/omnibus-gitlab:modernizenginxtls into master

What does this MR do?

This MR is a companion to gitlab!65345 (merged), please see that MR for a longer discussion about the why. This MR updates the TLS config to the intermediate setting from Mozilla's SSL configurator.

I have not tested this MR, since I only use source installations and I've never used the rails templating (at least I guess that's what it is), so this is mostly just copy pasting from what's already there, please have a look, whether this is correct.

Related issues

Checklist

See Definition of done.

For anything in this list which will not be completed, please provide a reason in the MR discussion

Required

  • Merge Request Title, and Description are up to date, accurate, and descriptive
  • MR targeting the appropriate branch
  • MR has a green pipeline on GitLab.com
  • Pipeline is green on dev.gitlab.org if the change is touching anything besides documentation or internal cookbooks
  • trigger-package has a green pipeline running against latest commit

Expected (please provide an explanation if not completing)

  • Test plan indicating conditions for success has been posted and passes
  • Documentation created/updated
  • Tests added
  • Integration tests added to GitLab QA
  • Equivalent MR/issue for the GitLab Chart opened

Merge request reports