diff --git a/nginx/nginx.conf b/nginx/nginx.conf index a1a6583f..c8287792 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -58,11 +58,11 @@ http { ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; - # maintained by nginx-rotate-session-ticket-keys in noswap tmpfs - ssl_session_ticket_key session-ticket-keys/4.key; - ssl_session_ticket_key session-ticket-keys/3.key; - ssl_session_ticket_key session-ticket-keys/2.key; - ssl_session_ticket_key session-ticket-keys/1.key; + # maintained by rotate-session-ticket-keys in noswap tmpfs + ssl_session_ticket_key /etc/session-ticket-keys/4.key; + ssl_session_ticket_key /etc/session-ticket-keys/3.key; + ssl_session_ticket_key /etc/session-ticket-keys/2.key; + ssl_session_ticket_key /etc/session-ticket-keys/1.key; ssl_session_timeout 1d; ssl_buffer_size 4k;