titanz/NGINX-Configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Cleanup mountpoint handling

Browse Source
This commit is contained in:
Tommy 2024-12-22 22:24:46 -07:00 committed by GitHub
parent 4cefc6b16c
commit 5bdbab68b6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/systemd/system/nginx-session-ticket-keys.mount
View File

@ -5,4 +5,5 @@ Description=NGINX session ticket keys /etc/nginx/session-ticket-keys
What=tmps
Where=/etc/nginx/session-ticket-keys
Type=tmpfs
Options=size=1M,mode=700,noswap,x-systemd.before=nginx-create-session-ticket-keys.service,x-systemd.required-by=nginx-create-session-ticket-keys.service
Options=size=1M,noswap,x-systemd.before=nginx-create-session-ticket-keys.service,x-systemd.required-by=nginx-create-session-ticket-keys.service
DirectoryMode=700

3
scripts/nginx-create-session-ticket-keys-ramfs
View File

@ -24,9 +24,6 @@ set -o errexit -o nounset -o pipefail
umask 077
mkdir -p /etc/nginx/session-ticket-keys
mount -t ramfs -o mode=700 ramfs /etc/nginx/session-ticket-keys
cd /etc/nginx/session-ticket-keys
for i in {1..4}; do

4
setup.sh
View File

@ -82,8 +82,6 @@ sudo systemctl daemon-reload
# Setup nginx-create-session-ticket-keys
mkdir -p /etc/nginx/session-ticket-keys
if grep -q rhel /etc/os-release; then
unpriv curl -s https://raw.githubusercontent.com/TommyTran732/NGINX-Configs/main/scripts/nginx-create-session-ticket-keys-ramfs | sudo tee /usr/local/bin/nginx-create-session-ticket-keys > /dev/null
else
@ -104,6 +102,7 @@ sudo chmod u+x "$(realpath /usr/local/bin/nginx-rotate-session-ticket-keys)"
sudo sed -i '$i restorecon -Rv /etc/nginx/session-ticket-keys' "$(realpath /usr/local/bin/nginx-rotate-session-ticket-keys)"
# Download the units
unpriv curl -s https://raw.githubusercontent.com/TommyTran732/NGINX-Configs/refs/heads/main/etc/systemd/system/nginx-session-ticket-keys.mount | sudo tee /etc/systemd/system/nginx-session-ticket-keys.mount > /dev/null
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/nginx-create-session-ticket-keys.service | sudo tee /etc/systemd/system/nginx-create-session-ticket-keys.service > /dev/null
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/nginx-rotate-session-ticket-keys.service | sudo tee /etc/systemd/system/nginx-rotate-session-ticket-keys.service > /dev/null
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/nginx-rotate-session-ticket-keys.timer | sudo tee /etc/systemd/system/nginx-rotate-session-ticket-keys.timer > /dev/null
@ -115,6 +114,7 @@ unpriv curl -s https://raw.githubusercontent.com/TommyTran732/NGINX-Configs/main
sudo systemctl daemon-reload
# Enable the units
sudo systemctl enable --now nginx-session-ticket-keys.mount
sudo systemctl enable --now nginx-create-session-ticket-keys.service
sudo systemctl enable --now nginx-rotate-session-ticket-keys.timer