From 69beb988f41b7d2eb57abbf66c4d5555a0146bce Mon Sep 17 00:00:00 2001
From: EuAndreh <eu@euandre.org>
Date: Mon, 18 Sep 2023 20:43:11 -0300
Subject: system.scm: Enable TLSv1.2 besides TLSv1.3

---
 src/infrastructure/guix/system.scm | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/infrastructure/guix/system.scm b/src/infrastructure/guix/system.scm
index bcc4936..adda409 100644
--- a/src/infrastructure/guix/system.scm
+++ b/src/infrastructure/guix/system.scm
@@ -410,7 +410,9 @@
                          "#)))))
                (raw-content
                  '(#"-
-                     ssl_protocols TLSv1.3;
+                     # BearSSL still doesn't TLSv1.3, so we deem TLSv1.2 as
+                     # acceptable
+                     ssl_protocols TLSv1.2 TLSv1.3;
                      include /opt/secrets/nginx.conf.txt;
                      charset utf-8;
                      autoindex on;
-- 
cgit v1.2.3