From f9d725a3894a3c44171d37a53d4a8e53afeec4ab Mon Sep 17 00:00:00 2001
From: Rory& <root@rory.gay>
Date: Fri, 13 Feb 2026 17:32:28 +0100
Subject: [PATCH] Nix testvm: enable ssl with test signed keys

---
 nix/testVm/configuration.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/nix/testVm/configuration.nix b/nix/testVm/configuration.nix
index a39531c2b..2b1c19a5e 100644
--- a/nix/testVm/configuration.nix
+++ b/nix/testVm/configuration.nix
@@ -1,6 +1,20 @@
 { pkgs, lib, ... }:
+let
+  nginxTestSigning = {
+    addSSL = true;
+    enableACME = false;
+
+    # We don't care about certificates around here...
+    sslCertificate = "${pkgs.path}/nixos/tests/common/acme/server/acme.test.cert.pem";
+    sslCertificateKey = "${pkgs.path}/nixos/tests/common/acme/server/acme.test.key.pem";
+  };
+in
 {
   networking.hostName = "sbtest";
+  services.nginx.virtualHosts."sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."api.sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."gw.sb.localhost" = nginxTestSigning;
+  services.nginx.virtualHosts."cdn.sb.localhost" = nginxTestSigning;
 
   services.spacebarchat-server =
     let