zimbatm f5f039eeb4 apache-httpd: harden default SSL cipher list ...

A couple of tweaks on the SSL cipher list.

Disabled RC4 which is now considered broken.
https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Enabled Forward Secrecy for modern browsers.
https://en.wikipedia.org/wiki/Forward_secrecy

Without the change, NixOS servers are capped at Grade B on
https://www.ssllabs.com/ssltest/index.html

2015-10-05 17:19:53 +01:00

..

apache-httpd

apache-httpd: harden default SSL cipher list

2015-10-05 17:19:53 +01:00

jboss

Rewrite ‘with pkgs.lib’ -> ‘with lib’

2014-04-14 16:26:48 +02:00

lighttpd

types.uniq types.int -> types.int

2015-06-15 18:11:32 +02:00

nginx

nginx: include mimetypes mapping

2015-09-07 14:43:19 +02:00

varnish

Rewrite ‘with pkgs.lib’ -> ‘with lib’

2014-04-14 16:26:48 +02:00

fcgiwrap.nix

Updated fcgiwrap's systemd unit to match upstream version.

2015-02-18 21:19:12 +00:00

phpfpm.nix

Manual: Remove store path references

2015-09-24 11:50:58 +02:00

shellinabox.nix

shellinabox service: intial implementation

2015-07-04 21:18:13 +12:00

tomcat.nix

nixos/tomcat: make package version configurable

2014-09-11 22:32:16 +02:00

uwsgi.nix

uwsgi-service: Add user/group for uwsgi service.

2015-06-24 14:48:53 +00:00

winstone.nix

java: More default cleanups

2015-01-07 14:55:41 -08:00

zope2.nix

Fix user-facing typos (mainly in descriptions)

2014-12-30 03:31:03 +01:00