pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #153252 from ncfavier/fix-rejectSSL

nixos/nginx: Revert "disable rejectSSL activation when https is disabled"

7c6f434c cc2d4030 8c1644ca

options
unified split
Changed files
+1 -1
nixos
modules
services
web-servers
nginx
default.nix
+1 -1
nixos/modules/services/web-servers/nginx/default.nix 
···

       
317

       
 

       
          ${optionalString (hasSSL && vhost.sslTrustedCertificate != null) ''


     

       
318

       
 

       
            ssl_trusted_certificate ${vhost.sslTrustedCertificate};


     

       
319

       
 

       
          ''}


     

       
320

       
-

       
          ${optionalString (hasSSL && vhost.rejectSSL) ''


     

       
321

       
 

       
            ssl_reject_handshake on;


     

       
322

       
 

       
          ''}


     

       
323

       
 

       
          ${optionalString (hasSSL && vhost.kTLS) ''


     
···

       
317

       
 

       
          ${optionalString (hasSSL && vhost.sslTrustedCertificate != null) ''


     

       
318

       
 

       
            ssl_trusted_certificate ${vhost.sslTrustedCertificate};


     

       
319

       
 

       
          ''}


     

       
320

       
+

       
          ${optionalString vhost.rejectSSL ''


     

       
321

       
 

       
            ssl_reject_handshake on;


     

       
322

       
 

       
          ''}


     

       
323

       
 

       
          ${optionalString (hasSSL && vhost.kTLS) ''