From 19876e35c9be6a95a5c944f561c3e10b3a7d9a81 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 27 May 2025 14:04:19 -0400 Subject: [PATCH] switch to new session ticket keys location --- nginx/nginx.conf | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/nginx/nginx.conf b/nginx/nginx.conf index a1a6583f..c8287792 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -58,11 +58,11 @@ http { ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; - # maintained by nginx-rotate-session-ticket-keys in noswap tmpfs - ssl_session_ticket_key session-ticket-keys/4.key; - ssl_session_ticket_key session-ticket-keys/3.key; - ssl_session_ticket_key session-ticket-keys/2.key; - ssl_session_ticket_key session-ticket-keys/1.key; + # maintained by rotate-session-ticket-keys in noswap tmpfs + ssl_session_ticket_key /etc/session-ticket-keys/4.key; + ssl_session_ticket_key /etc/session-ticket-keys/3.key; + ssl_session_ticket_key /etc/session-ticket-keys/2.key; + ssl_session_ticket_key /etc/session-ticket-keys/1.key; ssl_session_timeout 1d; ssl_buffer_size 4k;