Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-12-22 21:28:46 -07:00 committed by GitHub
parent 8100f6f770
commit cdf3b5858c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -72,7 +72,7 @@ unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/srv/nginx/app-ads.txt | sudo tee /srv/nginx/app-ads.txt > /dev/null
unpriv curl -s https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/srv/nginx/robots.txt | sudo tee /srv/nginx/robots.txt > /dev/null
sudo chmod 644 /srv/nginx/ads.txt /srv/nginx/app-ads.txt /srv/nginx/robots.txt
sudo restorecon -Rv "$(realpath /srv/nginx)(/.*)?"
sudo restorecon -Rv "$(realpath /srv/nginx)"
# NGINX hardening
sudo mkdir -p /etc/systemd/system/nginx.service.d