From d94adc8c0ecf2afdc3cef2b0d1ac933d62d7c0aa Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Sun, 6 Sep 2026 06:04:54 +0200
Subject: Use bunny.net for certificates and edge address unwrapping

Signed-off-by: Mel <mel@rnrd.eu>
---
 modules/foundation/www/tailnet.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'modules/foundation/www/tailnet.nix')

diff --git a/modules/foundation/www/tailnet.nix b/modules/foundation/www/tailnet.nix
index e7ec0e8..01fa156 100644
--- a/modules/foundation/www/tailnet.nix
+++ b/modules/foundation/www/tailnet.nix
@@ -24,7 +24,9 @@ let
       pem=$1
       ${pkgs.openssl}/bin/openssl x509 \
     -checkend ${toString oneWeekInSeconds} \
-    -noout <$pem
+    -noout <$pem &&
+      [ "$(${pkgs.openssl}/bin/openssl x509 -pubkey -noout <$pem)" \
+    = "$(${pkgs.openssl}/bin/openssl pkey -pubout <out/key.pem)" ]
     }
 
     try_renew() {
-- 
cgit v1.3.1