From e536b3343f5cca8853582ff5d67ba711f49dc798 Mon Sep 17 00:00:00 2001 From: lassulus Date: Tue, 1 Nov 2022 11:16:19 +0100 Subject: security-workarounds: add comments to openSSL 3 fixes --- krebs/2configs/security-workarounds.nix | 2 ++ 1 file changed, 2 insertions(+) (limited to 'krebs') diff --git a/krebs/2configs/security-workarounds.nix b/krebs/2configs/security-workarounds.nix index 76ef71f7b..74a77a0ed 100644 --- a/krebs/2configs/security-workarounds.nix +++ b/krebs/2configs/security-workarounds.nix @@ -1,5 +1,6 @@ { config, lib, pkgs, ... }: { + # OpenSSL pre-3.0.7 vulnerabilities nixpkgs.overlays = [ (self: super: { exim = @@ -16,5 +17,6 @@ }); }) ]; + # OpenSSL pre-3.0.7 vulnerabilities services.nginx.package = lib.mkDefault (pkgs.nginxStable.override { openssl = pkgs.libressl; }); } -- cgit v1.2.3