noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: disable locked ssh cert

Browse source
This commit is contained in:
Noa Aarts 2024-08-28 17:59:47 +02:00
parent ee3426583f
commit f0a4260590
Signed by: noa
GPG key ID: 1850932741EFF672
1 changed files with 1 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/server/configuration.nix
View file

@ -240,16 +240,7 @@
"locked.itepastra.nl" = {
forceSSL = true;
useACMEHost = "itepastra.nl";
extraConfig = ''
${extra}
ssl_client_certificate /etc/nginx/certificates/yubikey.crt;
ssl_verify_client on;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
keepalive_timeout 10;
ssl_session_timeout 5m;
'';
extraConfig = extra;
locations."/" = {
proxyWebsockets = true;