From 9f3dd9b45641b105bad055e52f338dbe6d67c077 Mon Sep 17 00:00:00 2001
From: -=ybafelo <theunis.botha1@gmail.com>
Date: Mon, 7 May 2018 13:39:44 +0200
Subject: [PATCH] ssl

---
 nginx/sites-available/r3.conf | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/nginx/sites-available/r3.conf b/nginx/sites-available/r3.conf
index 79f4399..aed9481 100644
--- a/nginx/sites-available/r3.conf
+++ b/nginx/sites-available/r3.conf
@@ -10,10 +10,15 @@ upstream php {
 # Now define our sites
 server {
 
-	#listen 443 ssl default_server;
+	listen 443 ssl default_server;
     listen 80 default_server;
     listen [::]:80 default_server ipv6only=on;
 
+	ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
+	ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
+    ssl_ciphers         HIGH:!aNULL:!MD5;
+
 	client_max_body_size 20M;
 
     server_name ~^(?<environment>.*?)-(?<app>.*?)\.(?<host_domain>.*);