how to get A-rating from ssllabs.com

[freiit]

tested my domain security with ssllabs.com and got a b-rating.

After adding into the certs directory a dhparam.pem-file, I got an A-rating for using strong Diffie-Hillmann-Group.

This is what I did:

openssl dhparam -out certs/${domain}.dhparams.pem 2048

Docs are from here: https://github.com/jwilder/nginx-proxy#diffie-hellman-groups

Maybe someone can include that in the initial setup step?
Thanks :)

[JrCs]

Thanks for the information.
I will add Done in my letsencrypt-nginx-proxy-companion container

[lambdafu]

Almost. It should be dhparam.pem without the s:

for domain in ... ; do openssl dhparam -out certs/${domain}.dhparams.pem 2048; done

A restart is required, but the rest is automagic.

[dmp1ce]

I'm not going to be be working on this project much more in favor of JrCs's companion container. Feel free to add a pull request if you want this added.