mkoppmann · mkoppmann · Jan 24, 2025 · Jan 13, 2025
diff --git a/Dockerfile b/Dockerfile
@@ -43,7 +43,7 @@ RUN cabal install \
 ####################
 # Deployment image #
 ####################
-FROM gcr.io/distroless/base:nonroot@sha256:6d4a4f40e93615df1677463ca56456379cc3a4e2359308c9e72bc60ffc4a12a9
+FROM gcr.io/distroless/base:nonroot@sha256:97d15218016debb9b6700a8c1c26893d3291a469852ace8d8f7d15b2f156920f
 
 # Copy missing shared libraries from build stage
 COPY --from=build /lib/x86_64-linux-gnu/libz.so.1 /lib/x86_64-linux-gnu/libz.so.1

diff --git a/src/Lib.hs b/src/Lib.hs
    --
    tlsCiphers :: [Cipher]
    tlsCiphers =
        [ TLS.cipher_TLS13_AES128GCM_SHA256
        , TLS.cipher_TLS13_AES256GCM_SHA384
        , TLS.cipher_TLS13_CHACHA20POLY1305_SHA256
        , TLS.cipher_ECDHE_ECDSA_AES128GCM_SHA256
        , TLS.cipher_ECDHE_RSA_AES128GCM_SHA256
        , TLS.cipher_ECDHE_ECDSA_AES256GCM_SHA384
        , TLS.cipher_ECDHE_RSA_AES256GCM_SHA384
        , TLS.cipher_ECDHE_ECDSA_CHACHA20POLY1305_SHA256
        , TLS.cipher_ECDHE_RSA_CHACHA20POLY1305_SHA256
        ]

 warpSettings :: String -> Port -> Settings
	--
	tlsCiphers :: [Cipher]
	tlsCiphers =
	[ TLS.cipher_TLS13_AES128GCM_SHA256
Check warning on line 100 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_AES128GCM_SHA256’` Check warning on line 100 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_AES128GCM_SHA256’`
	, TLS.cipher_TLS13_AES256GCM_SHA384
Check warning on line 101 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_AES256GCM_SHA384’` Check warning on line 101 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_AES256GCM_SHA384’`
	, TLS.cipher_TLS13_CHACHA20POLY1305_SHA256
Check warning on line 102 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_CHACHA20POLY1305_SHA256’` Check warning on line 102 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_TLS13_CHACHA20POLY1305_SHA256’`
	, TLS.cipher_ECDHE_ECDSA_AES128GCM_SHA256
Check warning on line 103 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_AES128GCM_SHA256’` Check warning on line 103 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_AES128GCM_SHA256’`
	, TLS.cipher_ECDHE_RSA_AES128GCM_SHA256
Check warning on line 104 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_AES128GCM_SHA256’` Check warning on line 104 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_AES128GCM_SHA256’`
	, TLS.cipher_ECDHE_ECDSA_AES256GCM_SHA384
Check warning on line 105 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_AES256GCM_SHA384’` Check warning on line 105 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_AES256GCM_SHA384’`
	, TLS.cipher_ECDHE_RSA_AES256GCM_SHA384
Check warning on line 106 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_AES256GCM_SHA384’` Check warning on line 106 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_AES256GCM_SHA384’`
	, TLS.cipher_ECDHE_ECDSA_CHACHA20POLY1305_SHA256
Check warning on line 107 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_CHACHA20POLY1305_SHA256’` Check warning on line 107 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_ECDSA_CHACHA20POLY1305_SHA256’`
	, TLS.cipher_ECDHE_RSA_CHACHA20POLY1305_SHA256
Check warning on line 108 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_CHACHA20POLY1305_SHA256’` Check warning on line 108 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_CHACHA20POLY1305_SHA256’` Check warning on line 108 in src/Lib.hs GitHub Actions / build-binary `In the use of ‘cipher_ECDHE_RSA_CHACHA20POLY1305_SHA256’`
	]

	warpSettings :: String -> Port -> Settings