disable openssl legacy provider on ssl 1.1

akkoma/admin-fe/default.nix

@@ -14,6 +14,7 @@
   python3,
   libsass,
   pkg-config,
+  callPackage,
 }: let
   source = builtins.fromJSON (builtins.readFile ./source.json);
   src = applyPatches {
@@ -25,10 +26,7 @@
     };
     patches = [./admin-fe.patch];
   };
-  nodeOptions =
-    if builtins.compareVersions nodejs.version "18" >= 0
-    then "--openssl-legacy-provider"
-    else "";
+  nodeOptions = callPackage ../../lib/opensslLegacyProvider.nix {};
 in
   mkYarnPackage rec {
     pname = "admin-fe";

akkoma/pleroma-fe/default.nix

@@ -11,6 +11,7 @@
   nodePackages,
   writeScript,
   applyPatches,
+  callPackage,
 }: let
   source = builtins.fromJSON (builtins.readFile ./source.json);
   src = applyPatches {
@@ -22,10 +23,7 @@
     };
     patches = [./pleroma-fe.patch];
   };
-  nodeOptions =
-    if builtins.compareVersions nodejs.version "18" >= 0
-    then "--openssl-legacy-provider"
-    else "";
+  nodeOptions = callPackage ../../lib/opensslLegacyProvider.nix {};
 in
   mkYarnPackage rec {
     pname = "pleroma-fe";

lib/default.nix

@@ -1,4 +1,5 @@
 {pkgs, ...}: {
   mkPleromaEmoji = pkgs.callPackage ./mkPleromaEmoji.nix {};
   gradleDeps = pkgs.callPackage ./gradleDeps.nix {};
+  opensslLegacyProvider = pkgs.callPackage ./opensslLegacyProvider.nix {};
 }

lib/opensslLegacyProvider.nix

@@ -0,0 +1,7 @@
+{
+  openssl,
+  nodejs,
+}:
+if builtins.compareVersions nodejs.version "18" >= 0 && builtins.compareVersions openssl.versions "3" >= 0
+then "--openssl-legacy-provider"
+else ""