switch to new session ticket keys location

This commit is contained in:
Daniel Micay 2025-05-27 14:04:19 -04:00
parent a8399ad76f
commit 19876e35c9

View File

@ -58,11 +58,11 @@ http {
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
# maintained by nginx-rotate-session-ticket-keys in noswap tmpfs # maintained by rotate-session-ticket-keys in noswap tmpfs
ssl_session_ticket_key session-ticket-keys/4.key; ssl_session_ticket_key /etc/session-ticket-keys/4.key;
ssl_session_ticket_key session-ticket-keys/3.key; ssl_session_ticket_key /etc/session-ticket-keys/3.key;
ssl_session_ticket_key session-ticket-keys/2.key; ssl_session_ticket_key /etc/session-ticket-keys/2.key;
ssl_session_ticket_key session-ticket-keys/1.key; ssl_session_ticket_key /etc/session-ticket-keys/1.key;
ssl_session_timeout 1d; ssl_session_timeout 1d;
ssl_buffer_size 4k; ssl_buffer_size 4k;