aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXe Iaso <me@christine.website>2022-10-29 18:34:31 -0400
committerXe Iaso <me@christine.website>2022-10-29 18:34:31 -0400
commite0a9a59a8006efef34be4706755fe0a10b65bb63 (patch)
tree404a9df48a2c5f72df055b6fd15be72d176b4d16
parentaf4dcc2191d81b96b8815c2255d26dfe3c604a24 (diff)
downloadxesite-e0a9a59a8006efef34be4706755fe0a10b65bb63.tar.xz
xesite-e0a9a59a8006efef34be4706755fe0a10b65bb63.zip
oops
Signed-off-by: Xe Iaso <me@christine.website>
-rw-r--r--blog/nixos-nginx-openssl-1.x.markdown8
1 files changed, 3 insertions, 5 deletions
diff --git a/blog/nixos-nginx-openssl-1.x.markdown b/blog/nixos-nginx-openssl-1.x.markdown
index 910339f..0ed1c22 100644
--- a/blog/nixos-nginx-openssl-1.x.markdown
+++ b/blog/nixos-nginx-openssl-1.x.markdown
@@ -20,11 +20,6 @@ security issue announced for OpenSSL
3.x](https://xeiaso.net/blog/openssl-3.x-secvuln-incoming) (OpenSSL 1.1.1 isn't
listed as CRITICAL).
-<xeblog-conv name="Cadey" mood="coffee">This is not needed unless you run NixOS
-unstable or use the nginx package from NixOS unstable. If you use NixOS 22.05,
-you are already using OpenSSL 1.1.1 unless you overrode things
-otherwise.</xeblog-conv>
-
Open your `configuration.nix` file and add this inside the module block:
```nix
@@ -35,6 +30,9 @@ nixpkgs.overlays = [
];
```
+<xeblog-conv name="Mara" mood="hacker">If you are using NixOS 22.05, use the
+package `openssl` instead of `openssl_1_1`.</xeblog-conv>
+
This will create an [overlay](https://nixos.wiki/wiki/Overlays) that will
replace the nginx package with a version that has OpenSSL replaced with the
OpenSSL 1.x package.