Nginx: Difference between revisions

@@ Line 4: / Line 4: @@
 In wake of the 2022 openssl library, nix can support in mitigating the library by downgrading (or replacing) the SSL library. For this, the [[Overlay|overlay]] facility of nixpkgs can be used:
 <syntaxHighlight lang=nix>
-{
+nixpkgs.overlays = [
-    nixpkgs.overlays = [
+   (final: super: {
-        (final: super: {
+        nginxStable = super.nginxStable.override { openssl = super.pkgs.libressl; };
-            nginxStable = super.nginxStable.override { openssl = super.pkgs.libressl; };
+    } )
-        } )
+];
-    ];
-}
 </syntaxHighlight>
 When utilizing Nixos options the following configuration will also work:
 <syntaxHighlight lang=nix>
-{
+services.nginx.package = pkgs.nginxStable.override { openssl = pkgs.libressl; };
-    services.nginx.package = pkgs.nginxStable.override { openssl = pkgs.libressl; };
-}
 </syntaxHighlight>