From e9d57bc3cec552cc477d6c3b6557ded5820ecdf7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Mon, 16 Dec 2024 01:56:49 +0100
Subject: [PATCH] nginx: better document challenges with tcpFastOpen

---
 modules/nginx.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/nginx.nix b/modules/nginx.nix
index 613a135..6c6cf95 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -49,7 +49,7 @@ in
       includeSubDomains = lib.mkEnableOption "" // { description = "Whether to add `includeSubDomains` to the `Strict-Transport-Security` header"; };
     };
 
-    tcpFastOpen = libS.mkOpinionatedOption "enable tcp fast open";
+    tcpFastOpen = libS.mkOpinionatedOption "enable tcp fast open. If TLS on port 443 is used, this requires configuring useACMEHost for `_`";
 
     # source https://gist.github.com/danbst/f1e81358d5dd0ba9c763a950e91a25d0
     virtualHosts = lib.mkOption {