Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-07-22 14:30:47 -04:00
Code Issues Projects Releases Packages Wiki Activity

make session ticket management more generic

Browse source
This commit is contained in:
Daniel Micay 2025-05-27 13:36:27 -04:00
parent 3e407eac80
commit 44f6e6021a
10 changed files with 30 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nginx-create-session-ticket-keys → create-session-ticket-keys
View file

@ -2,7 +2,7 @@
set -o errexit -o nounset -o pipefail set -o errexit -o nounset -o pipefail
cd /etc/nginx/session-ticket-keys cd /etc/session-ticket-keys
for i in {1..4}; do for i in {1..4}; do
head -c 80 </dev/random >$i.key head -c 80 </dev/random >$i.key

2
etc/fstab.metal
View file

@ -2,4 +2,4 @@
/dev/md/boot /boot vfat rw,nosuid,nodev,noexec,fmask=0177,dmask=0077 0 2 /dev/md/boot /boot vfat rw,nosuid,nodev,noexec,fmask=0177,dmask=0077 0 2
/dev/mapper/swap none swap defaults 0 0 /dev/mapper/swap none swap defaults 0 0
tmpfs /etc/nginx/session-ticket-keys tmpfs size=1M,mode=700,noswap,x-systemd.before=nginx-create-session-ticket-keys.service,x-systemd.required-by=nginx-create-session-ticket-keys.service 0 0 tmpfs /etc/session-ticket-keys tmpfs size=1M,mode=750,noswap,x-systemd.before=create-session-ticket-keys.service,x-systemd.required-by=create-session-ticket-keys.service 0 0

2
etc/fstab.virtual
View file

@ -1,2 +1,2 @@
/dev/mapper/swap none swap defaults 0 0 /dev/mapper/swap none swap defaults 0 0
tmpfs /etc/nginx/session-ticket-keys tmpfs size=1M,mode=700,noswap,x-systemd.before=nginx-create-session-ticket-keys.service,x-systemd.required-by=nginx-create-session-ticket-keys.service 0 0 tmpfs /etc/session-ticket-keys tmpfs size=1M,mode=750,noswap,x-systemd.before=create-session-ticket-keys.service,x-systemd.required-by=create-session-ticket-keys.service 0 0

10
etc/pacreport.conf
View file

@ -69,13 +69,13 @@ matterbridge-git = etc/systemd/system/matterbridge.service.d
matterbridge-git = var/lib/matterbridge matterbridge-git = var/lib/matterbridge
nftables = etc/sysctl.d/local-conntrack_size.conf nftables = etc/sysctl.d/local-conntrack_size.conf
nginx = etc/nginx nginx = etc/nginx
nginx = etc/systemd/system/nginx-create-session-ticket-keys.service nginx = etc/systemd/system/create-session-ticket-keys.service
nginx = etc/systemd/system/nginx-rotate-session-ticket-keys.service nginx = etc/systemd/system/rotate-session-ticket-keys.service
nginx = etc/systemd/system/nginx-rotate-session-ticket-keys.timer nginx = etc/systemd/system/rotate-session-ticket-keys.timer
nginx = etc/systemd/system/nginx.service.d nginx = etc/systemd/system/nginx.service.d
nginx = srv nginx = srv
nginx = usr/local/bin/nginx-create-session-ticket-keys nginx = usr/local/bin/create-session-ticket-keys
nginx = usr/local/bin/nginx-rotate-session-ticket-keys nginx = usr/local/bin/rotate-session-ticket-keys
nginx = var/lib/nginx nginx = var/lib/nginx
opendkim = etc/opendkim opendkim = etc/opendkim
opendkim = etc/systemd/system/opendkim.service opendkim = etc/systemd/system/opendkim.service

11
etc/systemd/system/create-session-ticket-keys.service Normal file
View file

@ -0,0 +1,11 @@
[Unit]
Description=Create TLS session ticket keys
Before=nginx.service
[Service]
ExecStart=/usr/local/bin/create-session-ticket-keys
Type=oneshot
UMask=0077
[Install]
WantedBy=multi-user.target

11
etc/systemd/system/nginx-create-session-ticket-keys.service
View file

@ -1,11 +0,0 @@
[Unit]
Description=Create nginx TLS session ticket keys
Before=nginx.service
[Service]
ExecStart=/usr/local/bin/nginx-create-session-ticket-keys
Type=oneshot
UMask=0077
[Install]
WantedBy=multi-user.target

9
etc/systemd/system/nginx-rotate-session-ticket-keys.service
View file

@ -1,9 +0,0 @@
[Unit]
Description=Rotate nginx TLS session ticket keys
After=nginx.service nginx-create-session-ticket-keys.service
Requires=nginx.service nginx-create-session-ticket-keys.service
[Service]
ExecStart=/usr/local/bin/nginx-rotate-session-ticket-keys
Type=oneshot
UMask=0077

9
etc/systemd/system/rotate-session-ticket-keys.service Normal file
View file

@ -0,0 +1,9 @@
[Unit]
Description=Rotate TLS session ticket keys
After=nginx.service create-session-ticket-keys.service
Requires=nginx.service create-session-ticket-keys.service
[Service]
ExecStart=/usr/local/bin/rotate-session-ticket-keys
Type=oneshot
UMask=0077

2
etc/systemd/system/nginx-rotate-session-ticket-keys.timer → etc/systemd/system/rotate-session-ticket-keys.timer
View file

@ -1,5 +1,5 @@
[Unit] [Unit]
Description=Run nginx-rotate-session-ticket-keys three times daily Description=Run rotate-session-ticket-keys three times daily
[Timer] [Timer]
OnCalendar=0/8:00:00 OnCalendar=0/8:00:00

2
nginx-rotate-session-ticket-keys → rotate-session-ticket-keys
View file

@ -2,7 +2,7 @@
set -o errexit -o nounset -o pipefail set -o errexit -o nounset -o pipefail
cd /etc/nginx/session-ticket-keys cd /etc/session-ticket-keys
rsync -I 2.key 1.key rsync -I 2.key 1.key
rsync -I 3.key 2.key rsync -I 3.key 2.key