aboutsummaryrefslogtreecommitdiff
path: root/src/infrastructure/guix/system.scm
diff options
context:
space:
mode:
Diffstat (limited to 'src/infrastructure/guix/system.scm')
-rw-r--r--src/infrastructure/guix/system.scm4
1 files changed, 1 insertions, 3 deletions
diff --git a/src/infrastructure/guix/system.scm b/src/infrastructure/guix/system.scm
index ab44194..5ff5e37 100644
--- a/src/infrastructure/guix/system.scm
+++ b/src/infrastructure/guix/system.scm
@@ -413,9 +413,7 @@
"#)))))
(raw-content
'(#"-
- # BearSSL still doesn't TLSv1.3, so we deem TLSv1.2 as
- # acceptable
- ssl_protocols TLSv1.2 TLSv1.3;
+ ssl_protocols TLSv1.3;
ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
ssl_prefer_server_ciphers on;
gzip off; # Disable compression altogether due to BREACH