nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-05-28 14:54:50 -05:00
Code

Revise hard-coded ssl resolver to Cloudflare & Quad9 (#543)

Browse Source 
Google (terrible) and OpenDNS (questionable at best) are not ideal for privacy-minded users.  Both Cloudflare DNS and Quad9 at least claim to drop logs, each of them have widely-reported response times, and they're sufficiently established with over a year of service.
This commit is contained in:
h-town 2019-08-05 06:34:29 -05:00 committed by Kyle Spearrin
parent 379d1b60bd
commit d081d0fc4d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
util/Setup/Templates/NginxConfig.hbs
View File

@ -43,7 +43,7 @@ server {
# Verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate {{{CaPath}}};
resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=300s;
resolver 1.1.1.1 1.0.0.1 9.9.9.9 valid=300s;
{{/if}}
include /etc/nginx/security-headers-ssl.conf;