avoid certificate issue in long running nomad jobs

input-output-hk · Oct 16, 2020 · e0fd6b4 · e0fd6b4
1 parent a911eda
commit e0fd6b4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/modules/nomad.nix b/modules/nomad.nix
@@ -1122,6 +1122,9 @@ in {
       environment = mkIf config.services.consul.enable {
         CONSUL_HTTP_ADDR = "http://127.0.0.1:8500";
         VAULT_FORMAT = "json";
+        # certificates get rotated often, we got no way to update them while
+        # the jobs are running...
+        VAULT_SKIP_VERIFY = "true";
         HOME = "/var/lib/nomad";
       };