Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-09-18 19:54:46 -04:00
Code Issues Projects Releases Packages Wiki Activity

add session ticket key management scripts

Browse source
This commit is contained in:
Daniel Micay 2023-07-09 18:04:17 -04:00
parent eb9a4ef2d1
commit 462bdc8599
5 changed files with 59 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
systemd/system/nginx-create-session-ticket-keys.service Normal file
View file

@ -0,0 +1,12 @@
[Unit]
Description=Create nginx TLS session ticket keys
Before=nginx.service
[Service]
Type=oneshot
User=root
Group=root
ExecStart=/usr/local/bin/nginx-create-session-ticket-keys
[Install]
WantedBy=multi-user.target

9
systemd/system/nginx-rotate-session-ticket-keys.service Normal file
View file

@ -0,0 +1,9 @@
[Unit]
Description=Rotate nginx TLS session ticket keys
After=nginx.service nginx-create-session-ticket-keys.service
[Service]
Type=oneshot
User=root
Group=root
ExecStart=/usr/local/bin/nginx-rotate-session-ticket-keys

8
systemd/system/nginx-rotate-session-ticket-keys.timer Normal file
View file

@ -0,0 +1,8 @@
[Unit]
Description=Run nginx-rotate-session-ticket-keys three times daily
[Timer]
OnCalendar=0/8:00:00
[Install]
WantedBy=timers.target