X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fwebsites%2Fdefault.nix;fp=modules%2Fwebsites%2Fdefault.nix;h=0a78c134ae56211dd4bf82c20f7dd91e7a6c0b4f;hb=41521c75a22ecdbf87f1e3139ba8d0877ac7915b;hp=837d838bb83608c151c68fa4796c82c2d9aea659;hpb=37465bc7b0601bbeb8ec84c728ef50f58788707a;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/websites/default.nix b/modules/websites/default.nix index 837d838..0a78c13 100644 --- a/modules/websites/default.nix +++ b/modules/websites/default.nix @@ -201,6 +201,7 @@ in logPerVirtualHost = true; multiProcessingModule = "worker"; # https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=intermediate&openssl=1.0.2t&guideline=5.4 + # test with https://www.ssllabs.com/ssltest/analyze.html?d=www.immae.eu&s=176.9.151.154&latest sslProtocols = "all -SSLv3 -TLSv1 -TLSv1.1"; sslCiphers = builtins.concatStringsSep ":" [ "ECDHE-ECDSA-AES128-GCM-SHA256" "ECDHE-RSA-AES128-GCM-SHA256"