john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

prune

Browse Source
This commit is contained in:
John Lancaster
2026-03-16 12:12:20 -05:00
parent a92fd22c65
commit 7b258b3eb9
1 changed files with 2 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
modules/services/step-ca/mtls.nix
View File

@@ -97,21 +97,8 @@ let
if ${lib.getExe pkgs.step-cli} certificate needs-renewal "${tlsCert}"; then if ${lib.getExe pkgs.step-cli} certificate needs-renewal "${tlsCert}"; then
echo "Renewing mTLS certificate" echo "Renewing mTLS certificate"
else else
rc=$? echo "Skipping renew"
case "$rc" in exit "$?"
1)
echo "mTLS certificate does not need renewal"
exit 0
;;
2)
echo "mTLS certificate missing: ${tlsCert}" >&2
exit 1
;;
*)
echo "step certificate needs-renewal failed with rc=$rc" >&2
exit "$rc"
;;
esac
fi fi
${lib.getExe pkgs.step-cli} ca renew --force "${tlsCert}" "${tlsKey}" ${lib.getExe pkgs.step-cli} ca renew --force "${tlsCert}" "${tlsKey}"