From f0a42605900d640a558bc7cdf7c3f4d9578147f9 Mon Sep 17 00:00:00 2001
From: Noa Aarts <noa@voorwaarts.nl>
Date: Wed, 28 Aug 2024 17:59:47 +0200
Subject: [PATCH] fix: disable locked ssh cert

---
 hosts/server/configuration.nix | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 62517ec..11b1aaa 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -240,16 +240,7 @@
           "locked.itepastra.nl" = {
             forceSSL = true;
             useACMEHost = "itepastra.nl";
-            extraConfig = ''
-              ${extra}
-              ssl_client_certificate /etc/nginx/certificates/yubikey.crt;
-              ssl_verify_client on;
-              ssl_prefer_server_ciphers on;
-              ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
-
-              keepalive_timeout 10;
-              ssl_session_timeout 5m;
-            '';
+            extraConfig = extra;
 
             locations."/" = {
               proxyWebsockets = true;