summaryrefslogtreecommitdiff
path: root/custom
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2019-02-01 22:07:38 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2019-02-01 22:07:38 +0100
commitd7b19ea3e9ad40267ee1962d35a41abe939078f6 (patch)
tree06b96f3c1c766d15e23465a3924f2859c95c9cfe /custom
parent6deef9d0ea097de48b510f4556c57b0fc0796217 (diff)
downloadnixos-d7b19ea3e9ad40267ee1962d35a41abe939078f6.tar
nixos-d7b19ea3e9ad40267ee1962d35a41abe939078f6.tar.gz
nixos-d7b19ea3e9ad40267ee1962d35a41abe939078f6.tar.bz2
nixos-d7b19ea3e9ad40267ee1962d35a41abe939078f6.tar.xz
nixos-d7b19ea3e9ad40267ee1962d35a41abe939078f6.zip
dhparams
Diffstat (limited to 'custom')
-rw-r--r--custom/ymir-nginx.nix6
1 files changed, 3 insertions, 3 deletions
diff --git a/custom/ymir-nginx.nix b/custom/ymir-nginx.nix
index 854dd4d4..975bb344 100644
--- a/custom/ymir-nginx.nix
+++ b/custom/ymir-nginx.nix
@@ -86,10 +86,10 @@ in {
86 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; 86 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
87 ssl_prefer_server_ciphers on; 87 ssl_prefer_server_ciphers on;
88 ssl_session_cache shared:SSL:10m; 88 ssl_session_cache shared:SSL:10m;
89 ssl_dhparam /etc/ssl/dhparam.pem; 89 ssl_dhparam ${config.security.dhparams.params.nginx.path};
90 90
91 ssl_certificate /var/lib/acme/yggdrasil.li/fullchain.pem; 91 ssl_certificate ${config.security.acme.directory}/yggdrasil.li/fullchain.pem;
92 ssl_certificate_key /var/lib/acme/yggdrasil.li/key.pem; 92 ssl_certificate_key ${config.security.acme.directory}/yggdrasil.li/key.pem;
93 93
94 server { 94 server {
95 listen *:80; 95 listen *:80;