From 008c8c94838bf5ee1516648bb1c877d610f5167c Mon Sep 17 00:00:00 2001
From: Marco Kundt <mrckndt@riseup.net>
Date: Tue, 20 Apr 2021 19:27:26 +0200
Subject: [PATCH] add Cloudflare as resolver for OCSP

---
 nginx/mattermost.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nginx/mattermost.conf b/nginx/mattermost.conf
index d5a2ffd..cb042cf 100644
--- a/nginx/mattermost.conf
+++ b/nginx/mattermost.conf
@@ -57,6 +57,7 @@ server {
     # OCSP stapling
     ssl_stapling on;
     ssl_stapling_verify on;
+    resolver 1.1.1.1;
 
     # verify chain of trust of OCSP response using Root CA and Intermediate certs
     #ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;