From 9b114bb28935398d718be2e89b900e5a7cf31757 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Mon, 14 Nov 2022 21:00:52 +0100
Subject: surtr: nginx X448

---
 hosts/surtr/http/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'hosts/surtr')

diff --git a/hosts/surtr/http/default.nix b/hosts/surtr/http/default.nix
index a77252ff..939a54fb 100644
--- a/hosts/surtr/http/default.nix
+++ b/hosts/surtr/http/default.nix
@@ -3,7 +3,7 @@
   imports = [
     ./webdav
   ];
-  
+
   config = {
     services.nginx = {
       enable = true;
@@ -13,7 +13,7 @@
       recommendedTlsSettings = true;
       sslDhparam = config.security.dhparams.params.nginx.path;
       commonHttpConfig = ''
-        ssl_ecdh_curve X25519:prime256v1:secp521r1:secp384r1;
+        ssl_ecdh_curve X448:X25519:prime256v1:secp521r1:secp384r1;
 
         log_format main
                 '$remote_addr "$remote_user" '
-- 
cgit v1.2.3