Strong Ciphers for Apache, NGINX and Lighttpd

The below strong ciphers are copy/pastable for your Apache, NGINX, Lighttpd, haproxy, Postfix, Exim, ProFTPd, Dovecot, Hitch TLS Proxy, Zarafa, MySQL, DirectAdmin, PostgreSQL, OpenSSH Server/Client, Golang Server and UniFi Controller config mirrored directly from They provide strong SSL security for all modern browsers, and you’ll obtain an A+ on the SSL Labs Test. In short, they: Set a strong Forward Secrecy enabled cipher suite Disable SSLv2 and SSLv3 Add HTTP Strict Transport Security and X-Frame-Deny headers Enable OCSP Stapling (except on Lighttpd, feature not supported yet) These examples are meant for sysadmins who have done this before (and sysadmins are