diff --git a/config/http/default.nix b/config/http/default.nix index 28be9b2..16594d7 100644 --- a/config/http/default.nix +++ b/config/http/default.nix @@ -30,11 +30,9 @@ in { recommendedBrotliSettings = true; sslCiphers = "EECDH+AESGCM:EECDH+CHACHA20:EDH+AESGCM:EDH+CHACHA20:AES256+EECDH:AES256+EDH:!aNULL"; - appendConfig = '' - ssl_prefer_server_ciphers on; - ''; appendHttpConfig = '' + ssl_prefer_server_ciphers on; map $scheme $hsts_header { https "max-age=31536000; includeSubdomains; preload"; }