Add new variable matrix_nginx_proxy_ssl_protocols

This commit is contained in:
Aaron Raimist
2018-11-02 18:20:05 -05:00
parent 3254a4d161
commit ebab95c9ec
4 changed files with 18 additions and 2 deletions

View File

@ -1,3 +1,14 @@
# 2018-11-03
## SSL protocols used to serve Riot and Synapse
There's now a new `matrix_nginx_proxy_ssl_protocols` playbook variable, which controls the SSL protocols used to serve Riot and Synapse. It's default value is `TLSv1.1 TLSv1.2`. This playbook previously used `TLSv1 TLSv1.1 TLSv1.2` to serve Riot and Synapse.
You may wish to reenable TLSv1 if you need to access Riot in older browsers.
Note: Currently the dockerized nginx doesn't support TLSv1.3. See https://github.com/nginxinc/docker-nginx/issues/190 for more details.
# 2018-11-01
## Postgres 11 support