SSLLabs A+ Rating with NGINX/Swag

[Vexedly]

Hey everyone,

 

I have a reverse proxy set up through the Swag container using a custom domain name.

I have sonarr.*, radarr.*, and a few others.

 

I only get a B rating from ssllabs

 

I want to increase that to an A+ rating, but have no idea where to start. Haven't found anything super helpful for Swag specifically.

 

Has anyone achieved an A+ rating? If so, send help

Thanks!

[ich777]

13 hours ago, Vexedly said:

Has anyone achieved an A+ rating? If so, send help

No problem here:

 

Can you eventually share about what ssllabs is complaining about?

If you look at the report from ssllabs you might be able to solve most issues yourself.

[Vexedly]

No problem here:

 
Can you eventually share about what ssllabs is complaining about?
If you look at the report from ssllabs you might be able to solve most issues yourself.

I didn’t realize Cloudflare’s proxy was live on my subdomains’ dns entries. That, as well as HSYS being disabled.

Commenting a line in my ngix config file, as well as switching my subdomains from proxy to dns-only solved the problem for me.


Sent from my iPhone using Tapatalk