nixpkgs/nixos/tests/common/letsencrypt/common.nix

{ lib, nodes, pkgs, ... }: let
  letsencrypt-ca = nodes.letsencrypt.config.test-support.letsencrypt.caCert;
in {
  networking.nameservers = [
    nodes.letsencrypt.config.networking.primaryIPAddress
  ];

  security.pki.certificateFiles = [ letsencrypt-ca ];
}
nixos/tests/letsencrypt: use Pebble instead of Boulder Let's encrypt bumped ACME to V2. We need to update our nixos test to be compatible with this new protocol version. We decided to drop the Boulder ACME server in favor of the more integration test friendly Pebble. - overriding cacert not necessary - this avoids rebuilding lots of packages needlessly - nixos/tests/acme: use pebble's ca for client tests - pebble always generates its own ca which has to be fetched TODO: write proper commit msg :) 2019-10-18 19:13:04 +02:00			`{ lib, nodes, pkgs, ... }: let`
			`letsencrypt-ca = nodes.letsencrypt.config.test-support.letsencrypt.caCert;`
			`in {`
nixos tests: move common configuration into separate file This allows tests outside nixos to use acme setup. 2018-09-24 21:06:31 +02:00			`networking.nameservers = [`
			`nodes.letsencrypt.config.networking.primaryIPAddress`
			`];`

nixos/tests/letsencrypt: use Pebble instead of Boulder Let's encrypt bumped ACME to V2. We need to update our nixos test to be compatible with this new protocol version. We decided to drop the Boulder ACME server in favor of the more integration test friendly Pebble. - overriding cacert not necessary - this avoids rebuilding lots of packages needlessly - nixos/tests/acme: use pebble's ca for client tests - pebble always generates its own ca which has to be fetched TODO: write proper commit msg :) 2019-10-18 19:13:04 +02:00			`security.pki.certificateFiles = [ letsencrypt-ca ];`
nixos tests: move common configuration into separate file This allows tests outside nixos to use acme setup. 2018-09-24 21:06:31 +02:00			`}`