diff options
| author | Izorkin <izorkin@elven.pw> | 2021-11-23 15:20:30 +0300 |
|---|---|---|
| committer | Izorkin <izorkin@elven.pw> | 2021-11-27 09:39:57 +0300 |
| commit | 2f66ac01e91d70837377c4356e5c99843b71f105 (patch) | |
| tree | 25a83f82bd77399db123e1990f9936d9eacdd6bd /nixos/modules/services/web-servers | |
| parent | 7376f4e34f85cd2ad9bb0c0c1caf75c1afb78fd0 (diff) | |
| download | nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar.gz nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar.bz2 nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar.lz nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar.xz nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.tar.zst nixpkgs-2f66ac01e91d70837377c4356e5c99843b71f105.zip | |
nixos/nginx: disable rejectSSL activation when https is disabled
Diffstat (limited to 'nixos/modules/services/web-servers')
| -rw-r--r-- | nixos/modules/services/web-servers/nginx/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 459cee34132..4aeca175432 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -313,7 +313,7 @@ let ${optionalString (hasSSL && vhost.sslTrustedCertificate != null) '' ssl_trusted_certificate ${vhost.sslTrustedCertificate}; ''} - ${optionalString vhost.rejectSSL '' + ${optionalString (hasSSL && vhost.rejectSSL) '' ssl_reject_handshake on; ''} ${optionalString (hasSSL && vhost.kTLS) '' |