vulnerability scanner: Insecure MAC algorithms in use: [email protected],hmac-sha1
Me: [email protected] 
(The point is that chacha20-poly1305 is an Authenticated Encryption scheme and doesn't need a HMAC to begin with.)