yisroelbaum/home-server-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test staging domain retirement

Browse source
This commit is contained in:
Yisroel Baum 2026-08-18 09:56:35 +03:00
parent 48cb3982a2
commit a0245748fb
Signed by: yisroelbaum
GPG key ID: 0FA60884F75520A9
1 changed files with 15 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

21
checks/rabbi-gerzi-domains.nix
View file

@ -9,6 +9,8 @@ let
backendConfig = config.services.rabbi-gerzi.backend;
frontendVirtualHost = config.services.nginx.virtualHosts.${frontendConfig.hostName};
backendVirtualHost = config.services.nginx.virtualHosts.${backendConfig.hostName};
frontendCertificate = config.security.acme.certs.${frontendConfig.hostName};
backendCertificate = config.security.acme.certs.${backendConfig.hostName};
redirectVirtualHost = lib.attrByPath [
"www.rabbigerzi.com"
] { } config.services.nginx.virtualHosts;
@ -34,17 +36,24 @@ let
assertion =
backendConfig.corsAllowedOrigins == [
"https://rabbigerzi.com"
"https://rabbigerzi.yisroelbaum.com"
];
message = "Rabbi Gerzi CORS origins do not cover production and staging";
message = "Rabbi Gerzi CORS origins are not production-only";
}
{
assertion = builtins.elem "rabbigerzi.yisroelbaum.com" frontendVirtualHost.serverAliases;
message = "Rabbi Gerzi frontend staging alias is missing";
assertion = !builtins.elem "rabbigerzi.yisroelbaum.com" frontendVirtualHost.serverAliases;
message = "Rabbi Gerzi frontend still serves the staging alias";
}
{
assertion = builtins.elem "rabbigerziapi.yisroelbaum.com" backendVirtualHost.serverAliases;
message = "Rabbi Gerzi backend staging alias is missing";
assertion = !builtins.elem "rabbigerziapi.yisroelbaum.com" backendVirtualHost.serverAliases;
message = "Rabbi Gerzi backend still serves the staging alias";
}
{
assertion = !builtins.elem "rabbigerzi.yisroelbaum.com" frontendCertificate.extraDomainNames;
message = "Rabbi Gerzi frontend certificate still covers staging";
}
{
assertion = !builtins.elem "rabbigerziapi.yisroelbaum.com" backendCertificate.extraDomainNames;
message = "Rabbi Gerzi backend certificate still covers staging";
}
{
assertion = redirectVirtualHost.globalRedirect or null == "rabbigerzi.com";