diff options
| author | Aaron Andersen <aaron@fosslib.net> | 2019-02-07 14:05:44 -0500 |
|---|---|---|
| committer | Aaron Andersen <aaron@fosslib.net> | 2019-02-07 14:05:44 -0500 |
| commit | dd610ce84fa09937008a0e5b8d5c89dfa80b0b75 (patch) | |
| tree | 95386c4a6532ec8d0289e907dcfe5d573ba334ef /nixos/modules/services/web-servers/apache-httpd/default.nix | |
| parent | 70765af1a695c06e5cbab64945faaab2bdaeeba7 (diff) | |
| download | nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar.gz nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar.bz2 nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar.lz nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar.xz nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.tar.zst nixpkgs-dd610ce84fa09937008a0e5b8d5c89dfa80b0b75.zip | |
nixos/httpd: disable TLSv1 by default for better security
Diffstat (limited to 'nixos/modules/services/web-servers/apache-httpd/default.nix')
| -rw-r--r-- | nixos/modules/services/web-servers/apache-httpd/default.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/services/web-servers/apache-httpd/default.nix b/nixos/modules/services/web-servers/apache-httpd/default.nix index bb962334786..b520996bbc1 100644 --- a/nixos/modules/services/web-servers/apache-httpd/default.nix +++ b/nixos/modules/services/web-servers/apache-httpd/default.nix @@ -639,8 +639,8 @@ in sslProtocols = mkOption { type = types.str; - default = "All -SSLv2 -SSLv3"; - example = "All -SSLv2 -SSLv3 -TLSv1"; + default = "All -SSLv2 -SSLv3 -TLSv1"; + example = "All -SSLv2 -SSLv3"; description = "Allowed SSL/TLS protocol versions."; }; } |