From 34113fc0d7cec65a0d272342bfc738ab32a703e1 Mon Sep 17 00:00:00 2001
From: Kristof Torma <tormakristof@tormakristof.eu>
Date: Thu, 13 Jan 2022 00:59:58 +0000
Subject: [PATCH] fix ssl errors

---
 job-test.sh      | 2 +-
 nginx-values.yml | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 nginx-values.yml

diff --git a/job-test.sh b/job-test.sh
index 2bd9673..c317e23 100755
--- a/job-test.sh
+++ b/job-test.sh
@@ -35,7 +35,7 @@ function installHelmApps() {
   helm repo add jetstack https://charts.jetstack.io
   helm repo update
   # Install ingress-nginx See: https://artifacthub.io/packages/helm/ingress-nginx/ingress-nginx
-  helm install ingress-nginx nginx-stable/nginx-ingress --namespace ingress-nginx --create-namespace --set controller.service.type="NodePort"
+  helm install ingress-nginx nginx-stable/nginx-ingress --namespace ingress-nginx --create-namespace -f nginx-values.yml
   # Install cert-manager See: https://artifacthub.io/packages/helm/cert-manager/cert-manager
   helm install ert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --set installCRDs=true
 }
diff --git a/nginx-values.yml b/nginx-values.yml
new file mode 100644
index 0000000..e347404
--- /dev/null
+++ b/nginx-values.yml
@@ -0,0 +1,7 @@
+controller:
+  service:
+    type: "NodePort"
+  config:
+    entries:
+      ssl-protocols: "TLSv1.2 TLSv1.3"
+      ssl-ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"