diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2025-05-27 14:04:19 -0400 |
|---|---|---|
| committer | Daniel Micay <daniel.micay@grapheneos.org> | 2025-05-27 14:04:19 -0400 |
| commit | 19876e35c9be6a95a5c944f561c3e10b3a7d9a81 (patch) | |
| tree | ab2189b77ad9d23e542c476e79da001bc2c698bf | |
| parent | a8399ad76f431a4005fcb6fe248f9d3fd4f0fcff (diff) | |
switch to new session ticket keys location
| -rw-r--r-- | nginx/nginx.conf | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf index a1a6583f..c8287792 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -58,11 +58,11 @@ http { ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; - # maintained by nginx-rotate-session-ticket-keys in noswap tmpfs - ssl_session_ticket_key session-ticket-keys/4.key; - ssl_session_ticket_key session-ticket-keys/3.key; - ssl_session_ticket_key session-ticket-keys/2.key; - ssl_session_ticket_key session-ticket-keys/1.key; + # maintained by rotate-session-ticket-keys in noswap tmpfs + ssl_session_ticket_key /etc/session-ticket-keys/4.key; + ssl_session_ticket_key /etc/session-ticket-keys/3.key; + ssl_session_ticket_key /etc/session-ticket-keys/2.key; + ssl_session_ticket_key /etc/session-ticket-keys/1.key; ssl_session_timeout 1d; ssl_buffer_size 4k; |
