From d5e5cf716221b96d0243c0885b37e0dddd81ce03 Mon Sep 17 00:00:00 2001 From: Giles Bradshaw Date: Thu, 6 Aug 2020 22:13:44 +0100 Subject: [PATCH] . --- docker-compose.yml | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 1ebc97a..dd5d195 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -14,12 +14,7 @@ services: - MITM_CERT=/run/secrets/ca.crt - MITM_KEY=/run/secrets/ca.key - VISIBLE_HOSTNAME=git.local-domain - - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs \ - options=NO_SSLv3,NO_TLSv1 \ - min-version=1.2 - #cipher=ECDHE+ECDSA \ - - #ALL:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS \ + - EXTRA_CONFIG1=tls_outgoing_options capath=/etc/ssl/certs options=NO_SSLv3,NO_TLSv1 min-version=1.2 - EXTRA_CONFIG2=sslproxy_cipher ECDHE+ECDSA+AESGCM:ECDHE+RSA+AESGCM:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM #:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS - # these are basically to make everything canched - 'EXTRA_CONFIG3=refresh_pattern ^http: 999999999 1000000000% 999999999 ignore-no-cache override-expire ignore-reload'