aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEuAndreh <eu@euandre.org>2023-09-18 20:43:11 -0300
committerEuAndreh <eu@euandre.org>2023-09-18 20:43:11 -0300
commit69beb988f41b7d2eb57abbf66c4d5555a0146bce (patch)
tree598294eac80461bc3fd19ade3f0f7e030f94e13c
parentsrc/infrastructure/guix/system.scm: TLS 1.3 only on nginx (diff)
downloadtoph-69beb988f41b7d2eb57abbf66c4d5555a0146bce.tar.gz
toph-69beb988f41b7d2eb57abbf66c4d5555a0146bce.tar.xz
system.scm: Enable TLSv1.2 besides TLSv1.3
-rw-r--r--src/infrastructure/guix/system.scm4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/infrastructure/guix/system.scm b/src/infrastructure/guix/system.scm
index bcc4936..adda409 100644
--- a/src/infrastructure/guix/system.scm
+++ b/src/infrastructure/guix/system.scm
@@ -410,7 +410,9 @@
"#)))))
(raw-content
'(#"-
- ssl_protocols TLSv1.3;
+ # BearSSL still doesn't TLSv1.3, so we deem TLSv1.2 as
+ # acceptable
+ ssl_protocols TLSv1.2 TLSv1.3;
include /opt/secrets/nginx.conf.txt;
charset utf-8;
autoindex on;