From 8a25df1358d262b23a0270d75fc57a70599cf500 Mon Sep 17 00:00:00 2001
From: Florian Sesser <florian@private.storage>
Date: Tue, 10 Aug 2021 13:47:00 +0000
Subject: [PATCH] Use default cipher list
---
nixos/modules/issuer.nix | 3 ---
1 file changed, 3 deletions(-)
diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index 382b2ee6..10de1984 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -199,9 +199,6 @@ in {
recommendedProxySettings = true;
recommendedTlsSettings = true;
- # Only allow PFS-enabled ciphers with AES256:
- sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";
-
virtualHosts."${domain}" = {
serverAliases = builtins.tail cfg.domains;
enableACME = cfg.tls;
--
GitLab