kiara/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity

Deployment tests: comment on Pebble's certificate

Browse source
This commit is contained in:
Nicolas Jeannerod 2025-06-04 15:38:38 +02:00 • committed by Valentin Gagarin
parent 69579fea1c
commit 046f7c5998
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
deployment/check/common/targetNode.nix
View file

@ -50,13 +50,16 @@ in
}; };
security.pki.certificateFiles = [ security.pki.certificateFiles = [
## NOTE: This certificate is the one used by the Pebble HTTPS server.
## This is NOT the root CA of the Pebble server. We do add it here so
## that Pebble clients can talk to its API, but this will not allow
## those machines to verify generated certificates.
testCerts.ca.cert testCerts.ca.cert
]; ];
## FIXME: it is a bit sad that all this logistics is necessary. look into ## FIXME: it is a bit sad that all this logistics is necessary. look into
## better DNS stuff ## better DNS stuff
networking.extraHosts = "${config.acmeNodeIP} acme.test"; networking.extraHosts = "${config.acmeNodeIP} acme.test";
}) })
]; ];
} }