makefu/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

k 3 nginx: add ssl.force_encryption

Browse source
This commit is contained in:
makefu 2016-07-21 16:19:07 +02:00
parent d858e2eef9
commit 77954f4ec0
1 changed files with 2 additions and 4 deletions

6
2configs/bepasty-dual.nix
View file

@ -45,6 +45,7 @@ in {
#certificate = "${sec}/wildcard.krebsco.de.crt";
#certificate_key = "${sec}/wildcard.krebsco.de.key";
ciphers = "RC4:HIGH:!aNULL:!MD5" ;
force_encryption = true;
};
locations = singleton ( nameValuePair "/.well-known/acme-challenge" ''
root ${acmechall}/${ext-dom}/;
@ -54,10 +55,7 @@ in {
ssl_session_timeout 10m;
ssl_verify_client off;
proxy_ssl_session_reuse off;
if ($scheme = http){
return 301 https://$server_name$request_uri;
}'';
'';
};
defaultPermissions = "read";
secretKey = secKey;