1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-30 17:41:12 +00:00
nixpkgs/nixos/modules/services/web-servers
zimbatm f5f039eeb4 apache-httpd: harden default SSL cipher list
A couple of tweaks on the SSL cipher list.

Disabled RC4 which is now considered broken.
https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Enabled Forward Secrecy for modern browsers.
https://en.wikipedia.org/wiki/Forward_secrecy

Without the change, NixOS servers are capped at Grade B on
https://www.ssllabs.com/ssltest/index.html
2015-10-05 17:19:53 +01:00
..
apache-httpd apache-httpd: harden default SSL cipher list 2015-10-05 17:19:53 +01:00
jboss Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
lighttpd types.uniq types.int -> types.int 2015-06-15 18:11:32 +02:00
nginx nginx: include mimetypes mapping 2015-09-07 14:43:19 +02:00
varnish Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
fcgiwrap.nix Updated fcgiwrap's systemd unit to match upstream version. 2015-02-18 21:19:12 +00:00
phpfpm.nix Manual: Remove store path references 2015-09-24 11:50:58 +02:00
shellinabox.nix shellinabox service: intial implementation 2015-07-04 21:18:13 +12:00
tomcat.nix nixos/tomcat: make package version configurable 2014-09-11 22:32:16 +02:00
uwsgi.nix uwsgi-service: Add user/group for uwsgi service. 2015-06-24 14:48:53 +00:00
winstone.nix java: More default cleanups 2015-01-07 14:55:41 -08:00
zope2.nix Fix user-facing typos (mainly in descriptions) 2014-12-30 03:31:03 +01:00