summaryrefslogtreecommitdiff
path: root/hosts/surtr/http/default.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-11-14 21:00:52 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-11-14 21:00:52 +0100
commit9b114bb28935398d718be2e89b900e5a7cf31757 (patch)
tree7d080cb1906951717894bfd31197bfcda6ceb0a1 /hosts/surtr/http/default.nix
parentb8f79b6690441cbe53c07dfd440f3330c886dc0d (diff)
downloadnixos-9b114bb28935398d718be2e89b900e5a7cf31757.tar
nixos-9b114bb28935398d718be2e89b900e5a7cf31757.tar.gz
nixos-9b114bb28935398d718be2e89b900e5a7cf31757.tar.bz2
nixos-9b114bb28935398d718be2e89b900e5a7cf31757.tar.xz
nixos-9b114bb28935398d718be2e89b900e5a7cf31757.zip
surtr: nginx X448
Diffstat (limited to 'hosts/surtr/http/default.nix')
-rw-r--r--hosts/surtr/http/default.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix
index a77252ff..939a54fb 100644
--- a/hosts/surtr/http/default.nix
+++ b/hosts/surtr/http/default.nix
@@ -3,7 +3,7 @@
3 imports = [ 3 imports = [
4 ./webdav 4 ./webdav
5 ]; 5 ];
6 6
7 config = { 7 config = {
8 services.nginx = { 8 services.nginx = {
9 enable = true; 9 enable = true;
@@ -13,7 +13,7 @@
13 recommendedTlsSettings = true; 13 recommendedTlsSettings = true;
14 sslDhparam = config.security.dhparams.params.nginx.path; 14 sslDhparam = config.security.dhparams.params.nginx.path;
15 commonHttpConfig = '' 15 commonHttpConfig = ''
16 ssl_ecdh_curve X25519:prime256v1:secp521r1:secp384r1; 16 ssl_ecdh_curve X448:X25519:prime256v1:secp521r1:secp384r1;
17 17
18 log_format main 18 log_format main
19 '$remote_addr "$remote_user" ' 19 '$remote_addr "$remote_user" '