Increase security of SSL via OCSP stapling

2024-01-15 00:28:48 +01:00 · 2024-01-15 00:28:48 +01:00 · 9bc37d34ba
parent 2abdb9e5a7
commit 9bc37d34ba
1 changed files with 1 additions and 0 deletions
--- a/modules/webstack.nix
+++ b/modules/webstack.nix
@ -180,6 +180,7 @@
      dnsResolver = "127.0.0.1:53";
      group = "nginx";
      webroot = "/var/lib/acme/acme-challenge";
+      ocspMustStaple = true;
    };
    certs."coolneng.duckdns.org".extraDomainNames = [
      "radicale.coolneng.duckdns.org"