Your one-stop-cake-shop for everything Freshly Baked has to offer

fix(pm/nginx): correct missinghost.invalid startup #151

merged opened by a.starrysky.fyi targeting main from private/minion/push-sutwurlpzwxt

Since https://github.com/NixOS/nixpkgs/commit/2d0a48912550cdc39a64e71d09d2c838973871ad, ACME certificates have been issued using a different set of services. The missinghost.invalid configuration here ended up breaking the nginx startup by making it so no selfsigned certificate was ever generated, getting nginx to die on a missing certificate.

Additonally, also as a result of this ACME rework, Stalwart was waiting on a bunch of nonexistent things and now no longer is

Labels

None yet.

requested-reviewers

None yet.

approved

None yet.

tested-working

None yet.

rejected

None yet.

assignee

None yet.

Participants 1
AT URI
at://did:plc:uuyqs6y3pwtbteet4swt5i5y/sh.tangled.repo.pull/3mbn4hjw3dc22
+2 -2
Interdiff #2 #3
+2 -2
packetmix/systems/common/nginx.nix
··· 34 security.acme.acceptTerms = true; 35 security.acme.certs = lib.mkIf config.services.nginx.enable { 36 "missinghost.invalid" = { 37 - dnsProvider = null; 38 listenHTTP = null; 39 s3Bucket = null; 40 - webroot = "/dev/null"; 41 email = "invalid@missinghost.invalid"; 42 }; # Nix requires some values, even if we're actually disabling the acme-missinghost.invalid service... that's problematic if there are no defaults for the system 43 };
··· 34 security.acme.acceptTerms = true; 35 security.acme.certs = lib.mkIf config.services.nginx.enable { 36 "missinghost.invalid" = { 37 + dnsProvider = "invalidns"; 38 listenHTTP = null; 39 s3Bucket = null; 40 + webroot = null; # We can't use webroot as the setup service validates it... 41 email = "invalid@missinghost.invalid"; 42 }; # Nix requires some values, even if we're actually disabling the acme-missinghost.invalid service... that's problematic if there are no defaults for the system 43 };
packetmix/systems/teal/stalwart.nix

This file has not been changed.

History

4 rounds 0 comments
sign up or login to add to the discussion
1 commit
expand
fix(pm/nginx): correct missinghost.invalid startup
5/5 success
expand
expand 0 comments
pull request successfully merged
1 commit
expand
fix(pm/nginx): correct missinghost.invalid startup
5/5 success
expand
expand 0 comments
1 commit
expand
fix(pm/nginx): correct missinghost.invalid startup
1/5 failed, 4/5 success
expand
expand 0 comments
1 commit
expand
fix(pm/nginx): correct missinghost.invalid startup
1/5 failed, 4/5 success
expand
expand 0 comments