From 4a47c2a7b80e0d1bb7543ebc3fb17d370111b899 Mon Sep 17 00:00:00 2001 From: Giles Bradshaw Date: Thu, 6 Aug 2020 14:09:22 +0100 Subject: [PATCH] . --- docker-compose.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 99aec89..6257201 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -16,7 +16,11 @@ services: - VISIBLE_HOSTNAME=git.local-domain - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs \ options=NO_SSLv3,NO_TLSv1 \ - cipher=ALL:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS \ + cipher=\ + TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\ + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\ + TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,\ + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256\ min-version=1.2 - EXTRA_CONFIG2=sslproxy_cipher EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS # - CONFIG_DISABLE=yes