mess around with a rust agent version with just rev shell.

deploy/reverse-proxy/Caddyfile.example

@@ -1,6 +1,10 @@
 # Replace overlord.example.com with the public DNS name. Caddy obtains and
 # renews the public certificate automatically.
 overlord.example.com {
+	tls {
+		protocols tls1.3
+	}
+
 	reverse_proxy 127.0.0.1:5173 {
 		header_up Host {host}
 		header_up X-Forwarded-Proto https

deploy/reverse-proxy/nginx.conf.example

@@ -11,6 +11,7 @@ server {
 
     ssl_certificate     /etc/letsencrypt/live/overlord.example.com/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/overlord.example.com/privkey.pem;
+    ssl_protocols       TLSv1.3;
 
     # Keep this at least as large as the uploads allowed by Overlord.
     client_max_body_size 2g;