diff options
| author | Mel <mel@rnrd.eu> | 2026-09-06 06:04:54 +0200 |
|---|---|---|
| committer | Mel <mel@rnrd.eu> | 2026-09-06 06:12:02 +0200 |
| commit | d94adc8c0ecf2afdc3cef2b0d1ac933d62d7c0aa (patch) | |
| tree | af7b093fcdef653298681d72ca4925e6f1fa8c6c /modules/foundation/www/tailnet.nix | |
| parent | 0df4a7d25021d2d5c92e447f2838ec920d49167b (diff) | |
| download | network-d94adc8c0ecf2afdc3cef2b0d1ac933d62d7c0aa.tar.zst network-d94adc8c0ecf2afdc3cef2b0d1ac933d62d7c0aa.zip | |
Use bunny.net for certificates and edge address unwrapping
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'modules/foundation/www/tailnet.nix')
| -rw-r--r-- | modules/foundation/www/tailnet.nix | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/modules/foundation/www/tailnet.nix b/modules/foundation/www/tailnet.nix index e7ec0e8..01fa156 100644 --- a/modules/foundation/www/tailnet.nix +++ b/modules/foundation/www/tailnet.nix @@ -24,7 +24,9 @@ let pem=$1 ${pkgs.openssl}/bin/openssl x509 \ -checkend ${toString oneWeekInSeconds} \ - -noout <$pem + -noout <$pem && + [ "$(${pkgs.openssl}/bin/openssl x509 -pubkey -noout <$pem)" \ + = "$(${pkgs.openssl}/bin/openssl pkey -pubout <out/key.pem)" ] } try_renew() { |