diff --git a/roles/web_server/files/tls.conf b/roles/web_server/files/tls.conf
new file mode 100644
index 0000000000000000000000000000000000000000..1612fdbd247cdcc027f6ad4831ef629b68239f06
--- /dev/null
+++ b/roles/web_server/files/tls.conf
@@ -0,0 +1,2 @@
+ssl_protocols TLSv1.2;
+ssl_ciphers DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:!aNULL:!MD5:!EXPORT;
\ No newline at end of file