Finally, after countless times of thinking about configuring TLS1.3 and saying "ah, it's too troublesome, forget it," the blog has finally implemented TLS1.3.
Taking advantage of the NGINX module in the DNMP-lvcshu project, I added support for TLS1.3. Actually, I didn't make many changes. I just upgraded NGINX to version 1.15.11
(I'm just not skilled enough, to be honest).
Then, I changed the NGINX image in the project from the UBUNTU-based one to the alpine version, reducing the size from 45MB to 7MB, making it even more lightweight.
The most troublesome part was modifying the configuration file. After all, I had to manually add the relevant TLS1.3 configurations for each website. It seems that I need to prioritize developing a small tool for distributing NGINX configuration files (feeling overwhelmed.jpg).