From b9adb4109270df69ce2c45358b8f56d1bd1b7f60 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Thu, 23 Dec 2021 13:54:00 +0100
Subject: surtr: rsa tls keys

---
 hosts/surtr/tls.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'hosts/surtr/tls.nix')

diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index 3aa53fb0..f05420cc 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -65,6 +65,7 @@ in {
             dnsProvider = "exec";
             credentialsFile = knotDNSCredentials domain;
             dnsResolver = "1.1.1.1:53";
+            keyType = "rsa4096"; # we don't like NIST curves
           };
         in genAttrs domains domainAttrset;
     };
-- 
cgit v1.2.3