Merge pull request #2239 from nginx-proxy/fix-rfc-5746

fix: always on session cache on HTTPS fallback listener
nginx-proxy · May 11, 2023 · 068bf91 · 068bf91
2 parents 9ff197d + e2539b0
commit 068bf91
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nginx.tmpl b/nginx.tmpl
@@ -422,11 +422,11 @@ server {
             {{- if $globals.enable_ipv6 }}
     listen [::]:{{ $globals.external_https_port }} ssl http2; {{- /* Do not add `default_server` (see comment above). */}}
             {{- end }}
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
         {{- end }}
     {{ $globals.access_log }}
         {{- if $globals.default_cert_ok }}
-    ssl_session_cache shared:SSL:50m;
-    ssl_session_tickets off;
     ssl_certificate /etc/nginx/certs/default.crt;
     ssl_certificate_key /etc/nginx/certs/default.key;
         {{- else }}