Nix testvm: enable ssl with test signed keys

1 files changed, 14 insertions, 0 deletions

diff --git a/nix/testVm/configuration.nix b/nix/testVm/configuration.nix

index a39531c2..2b1c19a5 100644
--- a/nix/testVm/configuration.nix
+++ b/nix/testVm/configuration.nix
@@ -1,6 +1,20 @@
 { pkgs, lib, ... }:
+let
+  nginxTestSigning = {
+    addSSL = true;
+    enableACME = false;
+
+    # We don't care about certificates around here...
+    sslCertificate = "${pkgs.path}/nixos/tests/common/acme/server/acme.test.cert.pem";
+    sslCertificateKey = "${pkgs.path}/nixos/tests/common/acme/server/acme.test.key.pem";
+  };
+in
 {
   networking.hostName = "sbtest";
+  services.nginx.virtualHosts."sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."api.sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."gw.sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."cdn.sb.localhost" = nginxTestSigning;
 
   services.spacebarchat-server =
     let