diff --git a/docker-compose.yml b/docker-compose.yml index 1ebc97a..dd5d195 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -14,12 +14,7 @@ services: - MITM_CERT=/run/secrets/ca.crt - MITM_KEY=/run/secrets/ca.key - VISIBLE_HOSTNAME=git.local-domain - - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs \ - options=NO_SSLv3,NO_TLSv1 \ - min-version=1.2 - #cipher=ECDHE+ECDSA \ - - #ALL:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS \ + - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs options=NO_SSLv3,NO_TLSv1 min-version=1.2 - EXTRA_CONFIG2=sslproxy_cipher ECDHE+ECDSA+AESGCM:ECDHE+RSA+AESGCM:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM #:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS - # these are basically to make everything canched - 'EXTRA_CONFIG3=refresh_pattern ^http: 999999999 1000000000% 999999999 ignore-no-cache override-expire ignore-reload'