From e08ff60d61bb18dcd14a47f2ee6dec66ad8cbd91 Mon Sep 17 00:00:00 2001
From: Profpatsch <mail@profpatsch.de>
Date: Tue, 1 Nov 2022 19:30:01 +0100
Subject: machines/legosi: move to openssl 1.1 in nginx for now
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CVE patch is out already, but let’s wait until upstream has all the
patches.
---
 machines/profpatsch/legosi.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'machines/profpatsch')

diff --git a/machines/profpatsch/legosi.nix b/machines/profpatsch/legosi.nix
index 72fc2b46..683e114a 100644
--- a/machines/profpatsch/legosi.nix
+++ b/machines/profpatsch/legosi.nix
@@ -157,6 +157,9 @@ in {
 
     services.nginx = {
       enable = true;
+      package = pkgs.nginx.override {
+        openssl = pkgs.openssl_1_1;
+      };
       recommendedGzipSettings = true;
       recommendedOptimisation = true;
       virtualHosts.${"profpatsch.de"} = {
-- 
cgit 1.4.1