From 1474c57bf56056cac13eb73aaefab1666689ef0e Mon Sep 17 00:00:00 2001
From: Julien Malka <julien@malka.sh>
Date: Sat, 26 Oct 2024 04:18:59 +0200
Subject: [PATCH] fix(nginx): better handling of ssl_stapling

---
 modules/nginx/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/nginx/default.nix b/modules/nginx/default.nix
index dd48a74..e5ddb22 100644
--- a/modules/nginx/default.nix
+++ b/modules/nginx/default.nix
@@ -53,7 +53,8 @@ in
                 allow fd7a:115c:a1e0::/48;
                 deny all;
               '';
-              extraConfig = ''
+
+              extraConfig = lib.mkIf (lib.hasSuffix "luj" name) ''
                 ssl_stapling off;
               '';
 
@@ -100,6 +101,7 @@ in
         sslCertificate = "/var/lib/acme/default/cert.pem";
         sslCertificateKey = "/var/lib/acme/default/key.pem";
         extraConfig = ''
+          ssl_stapling off;
           return 444;
         '';
       };