summary refs log tree commit diff
path: root/nixos/tests/common
diff options
context:
space:
mode:
authorLucas Savva <lucas@m1cr0man.com>2022-10-04 22:28:23 +0100
committerWinter <winter@winter.cafe>2022-10-06 10:30:24 -0400
commit49c0fd7d6005cab96c597d3c56ab0bade5f436c4 (patch)
tree9c7ad90a20fc07276a68ccf3b3b3311a2fe629b2 /nixos/tests/common
parent657ecbca0ece81c5e2a411d7044a3d837f520408 (diff)
downloadnixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar.gz
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar.bz2
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar.lz
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar.xz
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.tar.zst
nixpkgs-49c0fd7d6005cab96c597d3c56ab0bade5f436c4.zip
nixos/acme: Disable lego renew sleeping
Lego has a built-in mechanism for sleeping for a random amount
of time before renewing a certificate. In our environment this
is not only unnecessary (as our systemd timer takes care of it)
but also unwanted since it slows down the execution of the
systemd service encompassing it, thus also slowing down the
start up of any services its depending on.

Also added FixedRandomDelay to the timer for more predictability.
Diffstat (limited to 'nixos/tests/common')
-rw-r--r--nixos/tests/common/acme/client/default.nix5
1 files changed, 0 insertions, 5 deletions
diff --git a/nixos/tests/common/acme/client/default.nix b/nixos/tests/common/acme/client/default.nix
index 9a37e4f2fd3..503e610d1ac 100644
--- a/nixos/tests/common/acme/client/default.nix
+++ b/nixos/tests/common/acme/client/default.nix
@@ -9,11 +9,6 @@ in {
     defaults = {
       server = "https://${caDomain}/dir";
       email = "hostmaster@example.test";
-      # Avoid a random 0-8 minute sleep when testing renewals.
-      # We are not using LE servers in testing so this is not
-      # going to impact their load.
-      # See https://github.com/go-acme/lego/issues/1656
-      extraLegoRenewFlags = ["-no-random-sleep"];
     };
   };