From b017591305da2b6d6a5408b5e600058279d37d5e Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Thu, 30 Sep 2021 02:29:05 +0200
Subject: [PATCH] nginx: remove old workaround

---
 configuration.nix | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 4b164fe..e3516ac 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -343,16 +343,7 @@
   {
     enable = true;
     enableReload = true;
-    commonHttpConfig = ''
-      # recommendedTlsSettings  = true;
-      # android doesn't like this one:
-      # ssl_ecdh_curve secp384r1;
-      ssl_session_cache shared:SSL:42m;
-      ssl_session_timeout 23m;
-      ssl_prefer_server_ciphers on;
-      ssl_stapling on;
-      ssl_stapling_verify on;
-    '';
+    recommendedTlsSettings   = true;
     recommendedGzipSettings  = true;
     recommendedProxySettings = true;