summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2025-05-27 14:04:19 -0400
committerDaniel Micay <daniel.micay@grapheneos.org>2025-05-27 14:04:19 -0400
commit19876e35c9be6a95a5c944f561c3e10b3a7d9a81 (patch)
treeab2189b77ad9d23e542c476e79da001bc2c698bf
parenta8399ad76f431a4005fcb6fe248f9d3fd4f0fcff (diff)
switch to new session ticket keys location
-rw-r--r--nginx/nginx.conf10
1 files changed, 5 insertions, 5 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index a1a6583f..c8287792 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -58,11 +58,11 @@ http {
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
- # maintained by nginx-rotate-session-ticket-keys in noswap tmpfs
- ssl_session_ticket_key session-ticket-keys/4.key;
- ssl_session_ticket_key session-ticket-keys/3.key;
- ssl_session_ticket_key session-ticket-keys/2.key;
- ssl_session_ticket_key session-ticket-keys/1.key;
+ # maintained by rotate-session-ticket-keys in noswap tmpfs
+ ssl_session_ticket_key /etc/session-ticket-keys/4.key;
+ ssl_session_ticket_key /etc/session-ticket-keys/3.key;
+ ssl_session_ticket_key /etc/session-ticket-keys/2.key;
+ ssl_session_ticket_key /etc/session-ticket-keys/1.key;
ssl_session_timeout 1d;
ssl_buffer_size 4k;