security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

use relative paths for TLS state

Browse Source
This commit is contained in:
Daniel Micay 2021-05-06 18:51:49 -04:00
parent 9167bc429d
commit 10923373ec
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nginx/nginx.conf
View File

@ -51,17 +51,17 @@ http {
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d;
# maintained by nginx-rotate-session-ticket-keys in ramfs
ssl_session_ticket_key /etc/nginx/session-ticket-keys/4.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/3.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/2.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/1.key;
ssl_session_ticket_key session-ticket-keys/4.key;
ssl_session_ticket_key session-ticket-keys/3.key;
ssl_session_ticket_key session-ticket-keys/2.key;
ssl_session_ticket_key session-ticket-keys/1.key;
ssl_buffer_size 4k;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on;
ssl_stapling_verify on;
# maintained by certbot-ocsp-fetcher
ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der;
ssl_stapling_file ocsp-cache/grapheneos.org.der;
access_log /var/log/nginx/access.log combined buffer=64k flush=1m;
error_log /var/log/nginx/error.log;