From d5debd9b6bcb9440272e55f8313b8c0f17a46a40 Mon Sep 17 00:00:00 2001
From: Josh Brower <Josh@Defensivedepth.com>
Date: Fri, 16 Sep 2022 09:06:09 -0400
Subject: [PATCH] Change ssl_ecdh_curve

---
 salt/nginx/etc/nginx.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/nginx/etc/nginx.conf b/salt/nginx/etc/nginx.conf
index 8979535e8..623dae701 100644
--- a/salt/nginx/etc/nginx.conf
+++ b/salt/nginx/etc/nginx.conf
@@ -55,6 +55,7 @@ http {
 		ssl_session_cache shared:SSL:1m;
 		ssl_session_timeout  10m;
 		ssl_ciphers HIGH:!aNULL:!MD5;
+		ssl_ecdh_curve secp521r1:secp384r1;
 		ssl_prefer_server_ciphers on;
 		ssl_protocols TLSv1.2;
 	}