more debugging...

.github/workflows/ci.yml

@@ -88,6 +88,10 @@ jobs:
           echo "Checking if FireGuard service is active"
           sudo systemctl is-active fireguard
 
+          echo "Checking certs..."
+          cat /opt/fireguard/ssl/cert.pem
+          cat /opt/fireguard/ssl/key.pem
+
           echo "Connecting with openssl"
           openssl s_client -connect localhost:8800 -showcerts -prexit -debug
 

config/releases.exs

@@ -47,7 +47,7 @@ ssl_key_file =
     Environment variable SSL_KEY_FILE is missing. FireGuard requires SSL.
     """
 
-ssl_ca_cert_file = System.get_env("SSL_CA_CERT_FILE") || nil
+ssl_ca_cert_file = System.get_env("SSL_CA_CERT_FILE")
 
 # Optional environment variables
 pool_size = String.to_integer(System.get_env("POOL_SIZE") || "10")

pkg/debian/DEBIAN/postinst

@@ -60,7 +60,7 @@ SECRET_KEY_BASE="${secret_key_base}"
 
 # The URL to connect to your DB. Assumes the database has been created and this
 # user has privileges to create and modify tables.
-DATABASE_URL="ecto://${db_user}:${db_password}@localhost/fireguard"
+DATABASE_URL="ecto://${db_user}:${db_password}@${hostname}/fireguard"
 
 # The public key for the WireGuard interface controlled by FireGuard.
 # This should match what's in /etc/wireguard/wg-fireguard.conf.
@@ -84,8 +84,8 @@ SSL_KEY_FILE=/opt/fireguard/ssl/key.pem
 SSL_CA_CERT_FILE=
 
 # Host to use for generating links back to the application, such as in
-# outbound emails. Defaults to "localhost"
-URL_HOST=localhost
+# outbound emails. Defaults to "localhost".
+URL_HOST=${hostname}
 
 # For public-facing sites, it's recommended to leave signups disabled.
 DISABLE_SIGNUP=yes

scripts/build_prod_release.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+od=$(pwd)
+export MIX_ENV=prod
+
+cd apps/fg_http
+npm run deploy --prefix assets
+mix phx.digest
+
+cd $od
+mix release