ReviewOS
Reload

also looking at this

stacks/ts-cloud

fix(tls): wait for DNS before ACME issuance

#166
Merged chrisbbreuer wants to merge agent/wait-for-rpx-dns into main
4 files +42 -4
packages/ts-cloud/test/drivers/rpx-gateway.test.tsmodified+4-0
@@ -768,6 +768,10 @@ describe('managed TLS (acmeChallengeWebroot + cert renewal)', () => {
768768 expect(joined).toContain('acme:renew')
769769 expect(joined).toContain('--webroot')
770770 expect(joined).toContain(DEFAULT_ACME_WEBROOT)
771 expect(joined).toContain('while ! getent ahosts "$d"')
772 expect(joined).toContain("DNS_ATTEMPTS='24'")
773 expect(joined).toContain("DNS_DELAY_SECONDS='5'")
774 expect(joined.indexOf('wait_for_dns "$d"')).toBeLessThan(joined.indexOf('$TLSX acme:issue'))
771775 expect(joined).toContain(`[ -s "$CERTS/$d.crt" ] && systemctl restart ${RPX_SERVICE_NAME}`)
772776 expect(joined.indexOf(`systemctl restart ${RPX_SERVICE_NAME}`)).toBeLessThan(joined.indexOf('acme:renew'))
773777 // Per-app renewal units (slug defaults to 'app').