overlays/patches: pin OpenSSL 1.1

Due to a vulnerability in the current Nixpkgs only affecting 3.0.
Nginx has to be overridden specifically, as the only explicit user of
3.0.

1 files changed, 4 insertions, 0 deletions

diff --git a/overlays/patches/default.nix b/overlays/patches/default.nix
index 306607600b79..20378a5e3ab0 100644
--- a/overlays/patches/default.nix
+++ b/overlays/patches/default.nix
@@ -18,6 +18,10 @@ self: super: {
     web = self.callPackage mailman/web.nix { inherit (super) web; };
   });
 
+  nginxMainline = super.nginxMainline.override { inherit (self) openssl; };
+
+  openssl = self.openssl_1_1;
+
   public-inbox = self.callPackage ./public-inbox {
     inherit (super) public-inbox;
   };