Nginx: Difference between revisions
imported>\\\\\\\\\\\ Nginx is handling TLS, so proxyPass should almost always specify http, not https. |
imported>Makefu No edit summary |
||
| Line 1: | Line 1: | ||
Nginx is a lightweight webserver. Configuration is handled using the {{nixos:option|services.nginx.}} options. | Nginx is a lightweight webserver. Configuration is handled using the {{nixos:option|services.nginx.}} options. | ||
== Replace dependencies like openssl == | |||
In wake of the 2022 openssl library, nix can support in mitigating the library by downgrading (or replacing) the SSL library. For this, the [[Overlay|overlay]] facility of nixpkgs can be used: | |||
<syntaxHighlight lang=nix> | |||
{ | |||
nixpkgs.overlays = [ | |||
(final: super: { nginxStable = super.nginxStable.override { openssl = super.pkgs.libressl; }; } ) | |||
]; | |||
} | |||
</syntaxHighlight> | |||
== Let's Encrypt certificates == | == Let's Encrypt certificates == | ||