graphene-os-server-infrastr.../nginx-create-session-ticket-keys

#!/bin/bash

set -o errexit -o nounset -o pipefail

umask 077

mkdir -p /etc/nginx/session-ticket-keys
mount -t tmpfs -o size=1M,mode=700,noswap tmpfs /etc/nginx/session-ticket-keys

cd /etc/nginx/session-ticket-keys

for i in {1..4}; do
    head -c 80 </dev/random >$i.key
done
add session ticket key management scripts 2023-07-09 18:04:17 -04:00			`#!/bin/bash`

			`set -o errexit -o nounset -o pipefail`

			`umask 077`

			`mkdir -p /etc/nginx/session-ticket-keys`
switch to noswap tmpfs from ramfs for session ticket keys 2024-06-28 12:44:31 -04:00			`mount -t tmpfs -o size=1M,mode=700,noswap tmpfs /etc/nginx/session-ticket-keys`
add session ticket key management scripts 2023-07-09 18:04:17 -04:00
			`cd /etc/nginx/session-ticket-keys`

clean up session ticket rotation scripts 2024-03-20 22:43:26 -04:00			`for i in {1..4}; do`
			`head -c 80 </dev/random >$i.key`
			`done`