monitoring: extend telegraf certificate expiration to 100 years

The default 30-day expiration was causing certificates to expire
frequently, breaking monitoring. Setting to 100 years provides a
temporary solution until automated certificate rotation is implemented.

Fixes #5605
This commit is contained in:
Jörg Thalheim
2025-10-21 15:05:38 +02:00
parent 37da9fb3e4
commit 98136142b4

View File

@@ -44,8 +44,10 @@
pkgs.openssl
];
# TODO: Implement automated certificate rotation instead of using a 100-year expiration
script = ''
openssl req -x509 -nodes -newkey rsa:4096 \
-days 36500 \
-keyout "$out"/key \
-out "$out"/crt \
-subj "/C=US/ST=CA/L=San Francisco/O=Example Corp/OU=IT/CN=example.com"