From 83c741a1073e6972755397bcfa5d8f6a403968c1 Mon Sep 17 00:00:00 2001
From: Giulio De Pasquale <git@depasquale.giugl.io>
Date: Tue, 21 Feb 2023 01:28:13 +0100
Subject: [PATCH] nginx: Force TLS 1.3

---
 hosts/architect/nginx.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/architect/nginx.nix b/hosts/architect/nginx.nix
index 6f053a7..edbfeeb 100644
--- a/hosts/architect/nginx.nix
+++ b/hosts/architect/nginx.nix
@@ -13,7 +13,8 @@
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
-
+    sslProtocols = "TLSv1.3";
+    
     virtualHosts."architect.devs.giugl.io" = {
       default = true;
       enableACME = true;