enable tls 1.0 and 1.1

2018-02-11 15:44:16 +01:00
parent 80fa13a167
commit 4a590756c4
1 changed files with 2 additions and 0 deletions
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -7,6 +7,8 @@ networking.firewall.allowedTCPPorts = [80 443];

 services.nginx = {
        enable = true;
+	sslProtocols = "TLSv1 TLSv1.1 TLSv1.2";
+#	sslCiphers = "DHE+RSA+AES128+SHA:EECDH+aRSA+AESGCM:EDH+aRSA:EECDH+aRSA:+AES256:+AES128:+SHA1:!CAMELLIA:!SEED:!3DES:!DES:!RC4:!eNULL";
        recommendedGzipSettings = true;
        recommendedOptimisation = true;
        recommendedProxySettings = true;