summaryrefslogtreecommitdiffstats
path: root/krebs/2configs/security-workarounds.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2022-11-01 11:16:19 +0100
committerlassulus <lassulus@lassul.us>2022-11-01 11:16:19 +0100
commite536b3343f5cca8853582ff5d67ba711f49dc798 (patch)
treedcda6de12d4f3fb6e4e27530b12698bef9f80de3 /krebs/2configs/security-workarounds.nix
parenta5c08e96997d5fbbee41341b54c8b89ea48d423c (diff)
security-workarounds: add comments to openSSL 3 fixes
Diffstat (limited to 'krebs/2configs/security-workarounds.nix')
-rw-r--r--krebs/2configs/security-workarounds.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/krebs/2configs/security-workarounds.nix b/krebs/2configs/security-workarounds.nix
index 76ef71f7b..74a77a0ed 100644
--- a/krebs/2configs/security-workarounds.nix
+++ b/krebs/2configs/security-workarounds.nix
@@ -1,5 +1,6 @@
{ config, lib, pkgs, ... }:
{
+ # OpenSSL pre-3.0.7 vulnerabilities
nixpkgs.overlays = [
(self: super: {
exim =
@@ -16,5 +17,6 @@
});
})
];
+ # OpenSSL pre-3.0.7 vulnerabilities
services.nginx.package = lib.mkDefault (pkgs.nginxStable.override { openssl = pkgs.libressl; });
}