From 5ff7de70e7bcb0e676747a3e023b232de5bee8e1 Mon Sep 17 00:00:00 2001
From: 6543 <6543@obermui.de>
Date: Sun, 3 Oct 2021 03:19:13 +0200
Subject: [PATCH] set ssl_options snippet at global config

---
 nginx.conf                | 3 +--
 sites-available/default   | 1 -
 sites-available/nextcloud | 1 -
 3 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index 5dbe505..7967447 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -29,8 +29,7 @@ http {
 	# SSL Settings
 	##
 
-	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
-	ssl_prefer_server_ciphers on;
+	include /etc/nginx/snippets/ssl_options.conf
 
 	##
 	# Logging Settings
diff --git a/sites-available/default b/sites-available/default
index bd4d67d..27f99b8 100644
--- a/sites-available/default
+++ b/sites-available/default
@@ -9,7 +9,6 @@ server {
 
   ssl_certificate /etc/letsencrypt/live/my.domain.com/fullchain.pem;
 	ssl_certificate_key /etc/letsencrypt/live/my.domain.com/privkey.pem;
-	include /etc/nginx/snippets/ssl_options.conf;
 
 	client_max_body_size 5M;
 	client_body_buffer_size 256K;
diff --git a/sites-available/nextcloud b/sites-available/nextcloud
index 91a4388..0cddee5 100644
--- a/sites-available/nextcloud
+++ b/sites-available/nextcloud
@@ -9,7 +9,6 @@ server {
 
   ssl_certificate /etc/letsencrypt/live/cloud.domain.com/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/cloud.domain.com/privkey.pem;
-  include /etc/nginx/snippets/ssl_options.conf;
 
   client_body_in_file_only clean;
   client_body_buffer_size 128K;