graphene-os-server-infrastructure/nginx-rotate-session-ticket-keys

#!/bin/bash

set -o errexit -o nounset -o pipefail

umask 077

cd /etc/nginx/session-ticket-keys

rsync -I 2.key 1.key
rsync -I 3.key 2.key
rsync -I 4.key 3.key
openssl rand -out new.key 80
rsync -I new.key 4.key
rm new.key
nginx -s reload