]> git.immae.eu Git - perso/Immae/Config/Nix.git/commitdiff
Add comment about ssl testing
authorIsmaël Bouya <ismael.bouya@normalesup.org>
Mon, 27 Apr 2020 23:40:53 +0000 (01:40 +0200)
committerIsmaël Bouya <ismael.bouya@normalesup.org>
Mon, 27 Apr 2020 23:40:53 +0000 (01:40 +0200)
modules/websites/default.nix

index 837d838bb83608c151c68fa4796c82c2d9aea659..0a78c134ae56211dd4bf82c20f7dd91e7a6c0b4f 100644 (file)
@@ -201,6 +201,7 @@ in
       logPerVirtualHost = true;
       multiProcessingModule = "worker";
       # https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=intermediate&openssl=1.0.2t&guideline=5.4
+      # test with https://www.ssllabs.com/ssltest/analyze.html?d=www.immae.eu&s=176.9.151.154&latest
       sslProtocols = "all -SSLv3 -TLSv1 -TLSv1.1";
       sslCiphers = builtins.concatStringsSep ":" [
         "ECDHE-ECDSA-AES128-GCM-SHA256" "ECDHE-RSA-AES128-GCM-SHA256"