4
									
								
								setup.sh
									
									
									
									
									
								
							
							
						
						
									
										4
									
								
								setup.sh
									
									
									
									
									
								
							@@ -72,7 +72,7 @@ sudo chmod -R 755 /srv/nginx/.well-known/acme-challenge
 | 
			
		||||
# NGINX hardening
 | 
			
		||||
sudo mkdir -p /etc/systemd/system/nginx.service.d
 | 
			
		||||
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/nginx.service.d/local.conf | sudo tee /etc/systemd/system/nginx.service.d/override.conf > /dev/null
 | 
			
		||||
chmod 644 /etc/systemd/system/nginx.service.d/override.conf
 | 
			
		||||
sudo chmod 644 /etc/systemd/system/nginx.service.d/override.conf
 | 
			
		||||
sudo systemctl daemon-reload
 | 
			
		||||
 | 
			
		||||
# Setup nginx-create-session-ticket-keys
 | 
			
		||||
@@ -127,4 +127,4 @@ unpriv curl -s https://raw.githubusercontent.com/TommyTran732/NGINX-Configs/main
 | 
			
		||||
if [ "${ip_pinning}" = '0' ]; then
 | 
			
		||||
    sed -i 's/ipv4_1://g' /etc/nginx/conf.d/sites_default.conf
 | 
			
		||||
    sed -i 's/ipv6_1/::/g' /etc/nginx/conf.d/sites_default.conf
 | 
			
		||||
fi
 | 
			
		||||
fi
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user