diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix index 382b2ee6cb1230bf9b37a75a68c3926b136012fb..10de198467dce9d831b2eb40f89a60cfbf0d1298 100644 --- a/nixos/modules/issuer.nix +++ b/nixos/modules/issuer.nix @@ -199,9 +199,6 @@ in { recommendedProxySettings = true; recommendedTlsSettings = true; - # Only allow PFS-enabled ciphers with AES256: - sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL"; - virtualHosts."${domain}" = { serverAliases = builtins.tail cfg.domains; enableACME = cfg.tls;