Merge pull request #153252 from ncfavier/fix-rejectSSL

nixos/nginx: Revert "disable rejectSSL activation when https is disabled"
2 years ago · cc2d40304f
parent 8c1644ca38 ec150abd1a
commit cc2d40304f
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/web-servers/nginx/default.nix
+++ b/nixos/modules/services/web-servers/nginx/default.nix
@ -317,7 +317,7 @@ let
          ${optionalString (hasSSL && vhost.sslTrustedCertificate != null) ''
            ssl_trusted_certificate ${vhost.sslTrustedCertificate};
          ''}
-          ${optionalString (hasSSL && vhost.rejectSSL) ''
+          ${optionalString vhost.rejectSSL ''
            ssl_reject_handshake on;
          ''}
          ${optionalString (hasSSL && vhost.kTLS) ''