Swap out the postgresql cert from acme for a self-signed one #134

New Issue

oysteikt · 2024-08-22T23:09:53+02:00

oysteikt commented

2024-08-22 23:09:53 +02:00

We're not properly responding to the acme cert protocol stuff, so the postgres cert job has been complaining for months on end. It would probably be better to use a self-signed one and just trust it blindly. The only reason we even have it in the first place is because of some obscure service that I can't remember atm, that requires a TLS connection.

Maybe the snakeoil cert module would be okay for this?

We're not properly responding to the acme cert protocol stuff, so the postgres cert job has been complaining for months on end. It would probably be better to use a self-signed one and just trust it blindly. The only reason we even have it in the first place is because of some obscure service that I can't remember atm, that requires a TLS connection. Maybe the snakeoil cert module would be okay for this?

oysteikt added the

security

nixos

bug

labels 2024-08-22 23:09:53 +02:00

oysteikt added this to the Kanban project 2024-08-22 23:09:53 +02:00

oysteikt referenced this issue from Drift/pvv-nixos-config

2024-08-26 18:45:26 +02:00

Use snakeoil certs for postgresql #68

oysteikt referenced a pull request from Drift/pvv-nixos-config that will close this issue

2024-08-26 18:46:50 +02:00

Use snakeoil certs for postgresql #69