graphene-os-server-infrastructure

Git-Mirrors/graphene-os-server-infrastructure

Fork 0

mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-10-01 00:55:42 -04:00

Commit Graph

Author	SHA1	Message	Date
Daniel Micay	36423fb2bc	auto-restart nginx if master process is killed nginx handles restarting workers automatically but the master process is typically killed by the OOM killer too.	2022-09-26 16:45:15 -04:00
Daniel Micay	320ad2e3a8	replace tmpfiles.d with RuntimeDirectory for nginx This is much more robust because nginx will fail to start after being killed or crashing due to only removing old Unix domain sockets when it stops cleanly. It ends up owned by root:root instead of root:http which is fine because only the master process opens it.	2022-09-26 16:43:17 -04:00
Daniel Micay	88d8e37233	rename nginx service hardening.conf to local.conf	2022-09-26 14:04:45 -04:00

Author

SHA1

Message

Date

Daniel Micay

36423fb2bc

auto-restart nginx if master process is killed

nginx handles restarting workers automatically but the master process
is typically killed by the OOM killer too.

2022-09-26 16:45:15 -04:00

Daniel Micay

320ad2e3a8

replace tmpfiles.d with RuntimeDirectory for nginx

This is much more robust because nginx will fail to start after being
killed or crashing due to only removing old Unix domain sockets when it
stops cleanly. It ends up owned by root:root instead of root:http which
is fine because only the master process opens it.

2022-09-26 16:43:17 -04:00

Daniel Micay

88d8e37233

rename nginx service hardening.conf to local.conf

2022-09-26 14:04:45 -04:00

3 Commits