nginx session cache
For a better SSLlabs rating add sslsessioncache shared:sslsessioncache:10m;
You can add this setting in Additional nginx directives for your site.
—
IG
-
Christian Heutger commented
Sure, I can add everything via CLI or adjusting PHP, Apache or nginx via Plesk GUI. However, some defaults should be set, e.g. HTTP2 is enabled by default, but some ciphers violate with HTTP2, passive FTP is allowed, but ports are not enabled in firewall nor restricted in ftpd, so I still need to do some, however from version to version more rare, but still some options to have full support. I expect the panel setup is doing all of that for me. E.g. rkhunter still has false-positives which come from plesk or are well-known, why not whitelabel them by default?