switch to arbitrary system gid for tls group

This commit is contained in:
Daniel Micay 2025-11-30 23:45:58 -05:00
parent bf96962c90
commit 72950717af

View file

@ -20,7 +20,7 @@ for host in ${hosts_web[@]}; do
rsync etc/logrotate.d/nginx $remote:/etc/logrotate.d/nginx
ssh $remote 'mkdir -pm755 /var/cache/nginx &&
groupadd -fg 2100 tls &&
groupadd -fr tls &&
mkdir -pm 750 /etc/tls/session-ticket-keys &&
chmod 750 /etc/tls &&
chown root:tls /etc/tls &&