Merge pull request #99 from Dosenpfand/configurable_tls_cache_size

Add option to set TLS cache size

README.md

@@ -336,6 +336,10 @@ Defines various method for retrieving a TLS certificate.
   nextcloud_tls_cert_chain: /path/to/cert/chain
   # ^remote absolute path to the certificate's full chain- used only by apache - Optional
 ```
+```YAML
+nextcloud_tls_session_cache_size: 50m 
+```
+Set the size of the shared nginx TLS session cache to 50 MB.
 
 ### System configuration
 

defaults/main.yml

@@ -80,6 +80,7 @@ nextcloud_hsts: false # recommended >= 15552000
 # nextcloud_tls_cert_chain: /path/to/cert/chain
 # nextcloud_tls_src_cert: /path/to/cert
 # nextcloud_tls_src_cert_key: /path/to/cert/key
+nextcloud_tls_session_cache_size: 50m # in Byte or human readable size notation (g|m|k)
 
 # [APPS]
 nextcloud_apps: {}

templates/nginx_nc.j2

@@ -32,7 +32,7 @@ server {
     ssl_certificate {{ nextcloud_tls_cert_file }};
     ssl_certificate_key {{ nextcloud_tls_cert_key_file }};
     ssl_session_timeout 1d;
-    ssl_session_cache shared:SSL:50m;
+    ssl_session_cache shared:SSL:{{ nextcloud_tls_session_cache_size }};
     # ssl_session_tickets off;
     ssl_stapling on;
     ssl_stapling_verify on;