diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 402d3952..2267ed82 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -46,13 +46,12 @@ http { ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; - ssl_session_cache shared:SSL:10m; - ssl_session_timeout 1d; # maintained by nginx-rotate-session-ticket-keys in ramfs ssl_session_ticket_key session-ticket-keys/4.key; ssl_session_ticket_key session-ticket-keys/3.key; ssl_session_ticket_key session-ticket-keys/2.key; ssl_session_ticket_key session-ticket-keys/1.key; + ssl_session_timeout 1d; ssl_buffer_size 4k; ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;