rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

pelican: mount resolved CA bundle file for wings

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
rope 2026-08-09 12:56:01 +01:00
parent ff5a825a22
commit 584e40d466
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
services/pelican.nix
View file

@ -101,7 +101,14 @@
"/var/lib/pelican/:/var/lib/pelican/"
"/var/log/pelican/:/var/log/pelican/"
"/tmp/pelican/:/tmp/pelican/"
"/etc/ssl/certs:/etc/ssl/certs:ro"
# Upstream's compose mounts the whole /etc/ssl/certs directory, which
# is useless on NixOS: every entry there is a symlink through
# /etc/static into /nix/store, so the container inherits dangling
# links and wings dies with "x509: certificate signed by unknown
# authority" when it calls the panel. Bind the single file instead —
# docker resolves the symlink host-side, so the container gets real
# PEM content. This is the path Go checks first on Linux.
"/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro"
];
ports = [
# Daemon API + console websocket — nginx fronts it as games.nordhammer.it.