enable session tickets with rotation script

This commit is contained in:
Daniel Micay 2021-05-02 02:09:03 -04:00
parent 0338a30401
commit 0823948133

View File

@ -50,7 +50,9 @@ http {
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d;
ssl_session_tickets off;
# maintained by nginx-rotate-session-ticket-keys in ramfs
ssl_session_ticket_key /etc/nginx/session-ticket-keys/current.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/previous.key;
ssl_buffer_size 4k;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;