From ec150abd1a5559b835524667ab02e1186a8f947b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Na=C3=AFm=20Favier?= Date: Sun, 2 Jan 2022 21:01:29 +0100 Subject: [PATCH] Revert "nixos/nginx: disable rejectSSL activation when https is disabled" This reverts commit 2f66ac01e91d70837377c4356e5c99843b71f105. --- nixos/modules/services/web-servers/nginx/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/web-servers/nginx/default.nix b/nixos/modules/services/web-servers/nginx/default.nix index 05b7870fc3a1..dc174c8b41d0 100644 --- a/nixos/modules/services/web-servers/nginx/default.nix +++ b/nixos/modules/services/web-servers/nginx/default.nix @@ -317,7 +317,7 @@ let ${optionalString (hasSSL && vhost.sslTrustedCertificate != null) '' ssl_trusted_certificate ${vhost.sslTrustedCertificate}; ''} - ${optionalString (hasSSL && vhost.rejectSSL) '' + ${optionalString vhost.rejectSSL '' ssl_reject_handshake on; ''} ${optionalString (hasSSL && vhost.kTLS) ''