nixpkgs/nixos/modules
zimbatm f5f039eeb4 apache-httpd: harden default SSL cipher list
A couple of tweaks on the SSL cipher list.

Disabled RC4 which is now considered broken.
https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Enabled Forward Secrecy for modern browsers.
https://en.wikipedia.org/wiki/Forward_secrecy

Without the change, NixOS servers are capped at Grade B on
https://www.ssllabs.com/ssltest/index.html
2015-10-05 17:19:53 +01:00
..
config nixos/fonts: Add unifont to list of default fonts. 2015-09-26 21:04:15 +02:00
hardware Put all firmware in $out/lib/firmware 2015-08-25 00:40:34 +02:00
installer Merge pull request #10160 from dezgeg/pr-unset-build-hook-in-nixos-install 2015-09-30 23:33:07 +02:00
misc xtreemfs: add nixos module 2015-09-22 21:46:52 +02:00
profiles nixos: add xfs support to profiles/minimal 2015-09-18 18:58:18 +00:00
programs Manual: Remove store path references 2015-09-24 11:50:58 +02:00
security nixos: fix some types 2015-09-18 18:48:50 +00:00
services apache-httpd: harden default SSL cipher list 2015-10-05 17:19:53 +01:00
system Merge pull request #10076 from ts468/upstream.systemd 2015-09-30 15:12:43 +02:00
tasks networking module: restructure wlanInterfaces 2015-10-04 11:00:05 +02:00
testing test-instrumentation.nix: Prevent calling a pager 2015-01-15 14:39:29 +01:00
virtualisation nixos/docker: Include ZFS commands in PATH for ZFS storagedriver 2015-10-04 14:13:56 +02:00
module-list.nix xtreemfs: add nixos module 2015-09-22 21:46:52 +02:00
rename.nix nixos: give users of 'services.openvpn.enable' a nice warning message 2015-09-10 11:38:43 +02:00