From 2ddd50aef437eff224da784653fdd0787f36176c Mon Sep 17 00:00:00 2001 From: Luke Granger-Brown Date: Fri, 7 Jan 2022 15:23:43 +0000 Subject: [PATCH] etheroute-lon01: disable TLS verification for totoro For some reason this is failing with a TLS alert that the certificate is expired??? --- ops/nixos/etheroute-lon01/default.nix | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix index bb735617b0..81dd419645 100644 --- a/ops/nixos/etheroute-lon01/default.nix +++ b/ops/nixos/etheroute-lon01/default.nix @@ -320,8 +320,11 @@ in { })) (secureService "totoro" "invoices.lukegb.com" (public { regex = "^/((third_party|ajax|client_area|pdf)/.*|[a-zA-Z0-9]{8})$"; + tls_skip_verify = true; })) - (secureService "totoro" "invoices.lukegb.com" {}) + (secureService "totoro" "invoices.lukegb.com" { + tls_skip_verify = true; + }) (baseConfig // { from = "https://httpbin.int.lukegb.com"; to = "https://verify.pomerium.com";