encode backuphost in label for basebackups
[mirror/dsa-puppet.git] / modules / apache2 / templates / puppet-config.erb
1 <IfModule mod_ssl.c>
2   SSLProtocol all -SSLv2 -SSLv3
3   SSLHonorCipherOrder On
4
5   # this is a list that seems suitable as of 2014-10, when running wheezy.  It
6   # probably requires re-visiting regularly.
7   <% if @lsbmajdistrelease <= '7' -%>
8     SSLCipherSuite ECDH+AESGCM:ECDH+AES256:ECDH+AES128:ECDH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
9   <% else -%>
10     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!eNULL:!LOW:!MD5:!EXP:!RC4:!SEED:!DSS
11   <% end -%>
12 </IfModule>