push

2025-09-22 09:26:16 +02:00
parent 8c5e6a7c4c
commit 79ae4defc9
1 changed files with 5 additions and 1 deletions
--- a/haproxy/haproxy.cfg
+++ b/haproxy/haproxy.cfg
@@ -1,7 +1,11 @@
 global
    log stdout format raw local0
    ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11
-    ssl-default-bind-ciphers PROFILE=SYSTEM
+    # bez ssl-default-bind-ciphers; użyj domyślnych OpenSSL
+    # (opcjonalnie) dla TLS1.3:
+    ssl-default-bind-ciphersuites TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
+    # (opcjonalnie) dla TLS1.2:
+    # ssl-default-bind-ciphers ECDHE+AESGCM:EDH+AESGCM

 defaults
    log     global