maud - ещё один клиент Табуна

ssl_certificate /etc/letsencrypt/live/andreymal.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/andreymal.org/privkey.pem;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers kEECDH+AES128:kEECDH:kEDH:-3DES:kRSA+AES128:kEDH+3DES:DES-CBC3-SHA:!RC4:!aNULL:!eNULL:!MD5:!EXPORT:!LOW:!SEED:!CAMELLIA:!IDEA:!PSK:!SRP:!SSLv2;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_dhparam /etc/pki/nginx/dhparam.pem;  # Command: sudo openssl dhparam -out /etc/pki/nginx/dhparam.pem 4096


# "server" section:

location /.well-known/acme-challenge/ {
  expires 0;
  root /home/andreymal/le_webroot/;
}

# add_header Strict-Transport-Security "max-age=63072000";


# sudo letsencrypt certonly --email 'email' --webroot --webroot-path /home/andreymal/le_webroot -d andreymal.org -d www.andreymal.org -d etc.andreymal.org


# /etc/cron.weekly/letsencrypt:
# letsencrypt renew && systemctl reload nginx