{"id":21711780,"url":"https://github.com/l33tlamer/nginx-ssl-perfect-score","last_synced_at":"2026-05-16T20:34:15.749Z","repository":{"id":178585552,"uuid":"660509348","full_name":"l33tlamer/nginx-ssl-perfect-score","owner":"l33tlamer","description":"Score a perfect A+ 4x100 on SSL Labs and Internet.nl Hall of Fame","archived":false,"fork":false,"pushed_at":"2023-07-04T10:33:35.000Z","size":132,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-20T18:22:56.522Z","etag":null,"topics":["dns","letsencrypt","nginx","ssl"],"latest_commit_sha":null,"homepage":"","language":"HTML","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/l33tlamer.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-06-30T07:05:29.000Z","updated_at":"2023-07-04T10:32:53.000Z","dependencies_parsed_at":null,"dependency_job_id":"60075de2-076c-456c-8a1f-71280e922075","html_url":"https://github.com/l33tlamer/nginx-ssl-perfect-score","commit_stats":null,"previous_names":["l33tlamer/nginx-ssl-perfect-score"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/l33tlamer/nginx-ssl-perfect-score","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/l33tlamer%2Fnginx-ssl-perfect-score","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/l33tlamer%2Fnginx-ssl-perfect-score/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/l33tlamer%2Fnginx-ssl-perfect-score/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/l33tlamer%2Fnginx-ssl-perfect-score/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/l33tlamer","download_url":"https://codeload.github.com/l33tlamer/nginx-ssl-perfect-score/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/l33tlamer%2Fnginx-ssl-perfect-score/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33117892,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-16T18:38:32.183Z","status":"ssl_error","status_checked_at":"2026-05-16T18:38:29.903Z","response_time":115,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dns","letsencrypt","nginx","ssl"],"created_at":"2024-11-25T23:29:33.563Z","updated_at":"2026-05-16T20:34:15.733Z","avatar_url":"https://github.com/l33tlamer.png","language":"HTML","funding_links":[],"categories":[],"sub_categories":[],"readme":"# What is this?\n\nThis is a simple \"proof of concept\" setup for the Qualys SSL Labs test\nto achieve a flawless A+ rating with 100 points in all 4 categories.\n\n![Screenshot](/001.png)  \n\nhttps://www.ssllabs.com/ssltest\n\nIt also scores perfectly in the Website Test of internet.nl\n\n![Screenshot](/002.png)  \n\nhttps://en.internet.nl/test-site/\n\n# nginx\n\nFolder nginx contains a complete but very basic setup of a nginx webserver.\nFollow the comments in the docker-compose.yml file.\n\n\n# Lets Encrypt\n\nFolder lego contains scripts to issue and renew a Lets Encrypt certificate using the lego tool:\nhttps://github.com/go-acme/lego\n\nI would suggest you symlink the certificate files from the lego output folder to the nginx ssl folder. Beware of permissions.\n\n\n# security.txt\n\nnginx/html/.well-known/security.txt is a file that is tested for by the internet.nl test\nIt is based on the example they provide and signed. It contains no useful info, do not use this for production.\nYou can create your own file and then sign it with \"gpg -s --clear-sign security.txt\"\n\n# DNS setup\n\nFor some things specific DNS records are required. As a example i use the excellent and free service of https://desec.io/\n\n\n# DNSSEC\n\nYour domain provider and your DNS provider both need to support DNSSEC.\n\nIn this example DeSec are managing the DNS so they provide the required records in their interface.\nSubmit those to your domain provider to get them added. How exactly will vary a lot between providers.\n\nWith the example of DeSec for DNS and a free \"eu.org\" domain, you need to copy the DS records lines in\nthe following format into the interface at https://nic.eu.org (submit each line seperately):\n\n`example.eu.org.  86400  IN DS  38257 13 2 35dca...`\n\nPropagation can take some time. You can test your setup with https://dnssec-analyzer.verisignlabs.com/\n\nhttps://dnsviz.net/ could also be helpful.\n\n# DANE TLSA\n\nYou first must have a working DNSSEC setup, then you can proceed to add this.\n\nYou can use https://www.huque.com/bin/gen_tlsa to generate DANE TLSA records to use, a example output would be:\n\n`_443._tcp.example.com. IN TLSA 3 1 1 7843hngfdf832ffh8934rnsa821bnasdg73he983`\n\nAdd this as a TLSA record to your domain. The 3-1-1 usage fields are important when generating and recommended by Lets Encrypt.\nPaste your public SSL cert as PEM into the textfield, either just the cert or fullchain pem.\n\nAfter adding the record, propagation can take some time. You can test for the proper record with this:\n\nhttps://www.huque.com/bin/danecheck\n\n# CAA\n\nTo generate CAA records you can use https://sslmate.com/caa/ and then add them to your domain.\nA example would be:\n\n```\nName \t         Type     Flags     Tags     Value\nexample.com.\t CAA\t  0         issue    \"letsencrypt.org\"\nexample.com.     CAA      0         iodef    \"mailto:mail@example.com\"\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fl33tlamer%2Fnginx-ssl-perfect-score","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fl33tlamer%2Fnginx-ssl-perfect-score","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fl33tlamer%2Fnginx-ssl-perfect-score/lists"}