cluster/services/nginx: switch to OpenSSL 1.1 to mitigate a to-be-disclosed vulnerability

cluster/services/nginx/default.nix

@@ -1,6 +1,6 @@
 {
   services.nginx = {
     nodes.host = [ "VEGAS" "prophet" ];
-    nixos.host = [ ./nginx.nix ];
+    nixos.host = [ ./nginx.nix ./openssl-1.1.nix ];
   };
 }

cluster/services/nginx/openssl-1.1.nix

@@ -0,0 +1,7 @@
+{ pkgs, ... }:
+
+{
+  services.nginx.package = pkgs.nginx.override {
+    openssl = pkgs.openssl_1_1;
+  };
+}