Increase security of config
This commit is contained in:
parent
c9c88d0610
commit
e5c7b046b3
2 changed files with 7 additions and 4 deletions
|
@ -15,13 +15,13 @@ Simply download them from the "artifacts" section of this project.
|
||||||
A prebuilt docker image (10MB) is available:
|
A prebuilt docker image (10MB) is available:
|
||||||
|
|
||||||
```
|
```
|
||||||
docker pull docker.klink.asia/paul/certman
|
docker pull zombi/certman
|
||||||
```
|
```
|
||||||
### From Source-Docker
|
### From Source-Docker
|
||||||
You can easily build your own docker image from source
|
You can easily build your own docker image from source
|
||||||
|
|
||||||
```
|
```
|
||||||
docker build -t docker.klink.asia/paul/certman .
|
docker build -t zombi/certman .
|
||||||
```
|
```
|
||||||
|
|
||||||
## Configuration
|
## Configuration
|
||||||
|
|
|
@ -7,12 +7,15 @@ nobind
|
||||||
persist-key
|
persist-key
|
||||||
persist-tun
|
persist-tun
|
||||||
|
|
||||||
cipher AES-256-CBC
|
cipher AES-256-GCM
|
||||||
auth SHA512
|
auth SHA512
|
||||||
|
|
||||||
ns-cert-type server
|
ns-cert-type server
|
||||||
key-direction 1
|
key-direction 1
|
||||||
|
|
||||||
|
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
|
||||||
tls-version-min 1.2
|
tls-version-min 1.2
|
||||||
;comp-lzo
|
|
||||||
verb 3
|
verb 3
|
||||||
|
|
||||||
<ca>
|
<ca>
|
||||||
|
|
Loading…
Reference in a new issue