diff --git a/config/web.conf b/config/web.conf index b337b4e..2136479 100644 --- a/config/web.conf +++ b/config/web.conf @@ -5,7 +5,6 @@ ssl_certificate_key /ssl/xray.key; ssl_protocols TLSv1.3; ssl_ecdh_curve X25519:P-256:P-384:P-521; - ssl_ciphers '[ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]:ECDHE+AES128:RSA+AES128:ECDHE+AES256:RSA+AES256:ECDHE+3DES:RSA+3DES'; server_name xxx; index index.html index.htm; root /www/xray_web; diff --git a/config/web_compatible.conf b/config/web_compatible.conf index 8600d9b..e885868 100644 --- a/config/web_compatible.conf +++ b/config/web_compatible.conf @@ -3,9 +3,8 @@ listen [::]:443 http2; ssl_certificate /ssl/xray.crt; ssl_certificate_key /ssl/xray.key; - ssl_protocols TLSv1.3 TLSv1.2; + ssl_protocols TLSv1.2 TLSv1.3; ssl_ecdh_curve X25519:P-256:P-384:P-521; - ssl_ciphers '[ECDHE-ECDSA-AES128-GCM-SHA256|ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-AES128-GCM-SHA256|ECDHE-RSA-CHACHA20-POLY1305]:ECDHE+AES128:RSA+AES128:ECDHE+AES256:RSA+AES256:ECDHE+3DES:RSA+3DES'; server_name xxx; index index.html index.htm; root /www/xray_web;