security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

use relative paths for TLS state

Browse Source
This commit is contained in:
Daniel Micay 2021-05-06 18:51:49 -04:00
parent 9167bc429d
commit 10923373ec
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nginx/nginx.conf
View File

@ -51,17 +51,17 @@ http {
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d; ssl_session_timeout 1d;
# maintained by nginx-rotate-session-ticket-keys in ramfs # maintained by nginx-rotate-session-ticket-keys in ramfs
ssl_session_ticket_key /etc/nginx/session-ticket-keys/4.key; ssl_session_ticket_key session-ticket-keys/4.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/3.key; ssl_session_ticket_key session-ticket-keys/3.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/2.key; ssl_session_ticket_key session-ticket-keys/2.key;
ssl_session_ticket_key /etc/nginx/session-ticket-keys/1.key; ssl_session_ticket_key session-ticket-keys/1.key;
ssl_buffer_size 4k; ssl_buffer_size 4k;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem; ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;
# maintained by certbot-ocsp-fetcher # maintained by certbot-ocsp-fetcher
ssl_stapling_file /etc/nginx/ocsp-cache/grapheneos.org.der; ssl_stapling_file ocsp-cache/grapheneos.org.der;
access_log /var/log/nginx/access.log combined buffer=64k flush=1m; access_log /var/log/nginx/access.log combined buffer=64k flush=1m;
error_log /var/log/nginx/error.log; error_log /var/log/nginx/error.log;