Merge pull request #101754 from rnhmjoj/dnscrypt-fix

nixos/dnscrypt-wrapper: fix key rotation script
2020-10-26 13:51:35 +01:00
parent f861aae44c 9e04bba0af
commit 4c07f77124
1 changed files with 4 additions and 1 deletions
--- a/nixos/modules/services/networking/dnscrypt-wrapper.nix
+++ b/nixos/modules/services/networking/dnscrypt-wrapper.nix
@@ -55,7 +55,10 @@ let
  rotateKeys = ''
    # check if keys are not expired
    keyValid() {
-      fingerprint=$(dnscrypt-wrapper --show-provider-publickey | awk '{print $(NF)}')
+      fingerprint=$(dnscrypt-wrapper \
+        --show-provider-publickey \
+        --provider-publickey-file=${publicKey} \
+        | awk '{print $(NF)}')
      dnscrypt-proxy --test=${toString (cfg.keys.checkInterval + 1)} \
        --resolver-address=127.0.0.1:${toString cfg.port} \
        --provider-name=${cfg.providerName} \