From 82d11a7ae1660edb24cab08003d33e36f70e5017 Mon Sep 17 00:00:00 2001
From: colin <colin@uninsane.org>
Date: Wed, 30 Nov 2022 02:09:35 +0000
Subject: [PATCH] nginx: note that OCSP stapling isn't actually working

---
 hosts/servo/services/nginx.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/servo/services/nginx.nix b/hosts/servo/services/nginx.nix
index 792cc4cf6..852bf4287 100644
--- a/hosts/servo/services/nginx.nix
+++ b/hosts/servo/services/nginx.nix
@@ -31,6 +31,7 @@ in
   # sets gzip_comp_level = 5
   services.nginx.recommendedGzipSettings = true;
   # enables OCSP stapling (so clients don't need contact the OCSP server -- i do instead)
+  # - doesn't seem to, actually: <https://www.ssllabs.com/ssltest/analyze.html?d=uninsane.org>
   # caches TLS sessions for 10m
   services.nginx.recommendedTlsSettings = true;
   # enables sendfile, tcp_nopush, tcp_nodelay, keepalive_timeout 65