dep updates/header changes/tls changes

Signed-off-by: Zoey <zoey@z0ey.de>

- dep updates
- upodate nginx/certbot
- improve headers
- change NPM to NPMplus in launch.sh
- when using https backend, only TLSv1 to TLSv1.3 is now allowed, whith secure ciphers
This commit is contained in:
renovate[bot]
2023-10-12 01:35:04 +00:00
committed by Zoey
parent 36298f284d
commit 8987ff9c6d
14 changed files with 44 additions and 26 deletions

View File

@@ -1,7 +1,19 @@
{% if certificate and certificate_id > 0 -%}
{% if ssl_forced == 1 or ssl_forced == true %}
{% if hsts_enabled == 1 or hsts_enabled == true %}
more_clear_headers "Expect-CT";
include conf.d/include/hsts.conf;
{% endif %}
{% endif %}
{% endif %}
{% unless certificate and certificate_id > 0 -%}
{% unless ssl_forced == 1 or ssl_forced == true %}
{% unless hsts_enabled == 1 or hsts_enabled == true %}
more_clear_headers "Content-Security-Policy";
more_clear_headers "Expect-CT";
more_clear_headers "Strict-Transport-Security";
{% endunless %}
{% endunless %}
{% endunless %}