From 41aa70849f9898b7bd4636b15e343b6bb06ffbf9 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 27 May 2025 14:05:50 -0400 Subject: [PATCH] switch to new session ticket keys location --- nginx/nginx.conf | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/nginx/nginx.conf b/nginx/nginx.conf index d3ed380..7881ba7 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -58,11 +58,11 @@ http { ssl_certificate /etc/letsencrypt/live/matrix.grapheneos.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/matrix.grapheneos.org/privkey.pem; - # maintained by nginx-rotate-session-ticket-keys in noswap tmpfs - ssl_session_ticket_key session-ticket-keys/4.key; - ssl_session_ticket_key session-ticket-keys/3.key; - ssl_session_ticket_key session-ticket-keys/2.key; - ssl_session_ticket_key session-ticket-keys/1.key; + # maintained by rotate-session-ticket-keys in noswap tmpfs + ssl_session_ticket_key /etc/session-ticket-keys/4.key; + ssl_session_ticket_key /etc/session-ticket-keys/3.key; + ssl_session_ticket_key /etc/session-ticket-keys/2.key; + ssl_session_ticket_key /etc/session-ticket-keys/1.key; ssl_session_timeout 1d; ssl_buffer_size 4k;