simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

fuuko/paperless: Disable TLS for FTP

Browse source 
For some reason, my brother DCP-L2660DW always fails uploading the file
(but can log in via TLS flawlessly).
This commit is contained in:
Simon Bruder 2024-09-23 20:26:49 +02:00
parent a9dab10975
commit f0a5cef516
Signed by: simon
GPG key ID: 347FF8699CDA0776
1 changed files with 0 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
machines/fuuko/services/paperless.nix
View file

@ -82,11 +82,6 @@
chrootlocalUser = true; chrootlocalUser = true;
userlist = [ "scan" ]; userlist = [ "scan" ];
rsaCertFile = "${config.security.acme.certs."fuuko.lan.shinonome-lab.de".directory}/full.pem";
forceLocalLoginsSSL = true;
forceLocalDataSSL = true;
ssl_tlsv1 = false; # only allow TLS 1.2+
extraConfig = '' extraConfig = ''
listen_ipv6=YES listen_ipv6=YES
@ -98,11 +93,6 @@
pasv_min_port=30000 pasv_min_port=30000
pasv_max_port=30009 pasv_max_port=30009
# generated 2024-09-22, Mozilla Guideline v5.7, adapted, OpenSSL 3.0.14, intermediate configuration
# https://ssl-config.mozilla.org
ssl_enable=YES
ssl_ciphers=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305
''; '';
}; };