Running vars check using Nix-based executor...
Executing shared generators...
Executing shared generator: pki-root-ca
+ set -euo pipefail
+ PATH=/nix/store/4qf8745jx1jbrhydy07gvz7bw7zp9y1d-openssl-3.6.3-bin/bin:/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/ca.key 4096
+ openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
✓ Generated shared file: pki-root-ca/ca.crt
✓ Generated shared file: pki-root-ca/ca.key
✓ Shared Generator pki-root-ca completed
✓ Shared generators completed
Processing machine: caddy
Generator execution order: cert-website.caddy -> state-version
Executing generator: cert-website.caddy
+ set -euo pipefail
+ PATH=/nix/store/4qf8745jx1jbrhydy07gvz7bw7zp9y1d-openssl-3.6.3-bin/bin:/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/website.caddy.key 4096
+ openssl req -new -key /output/website.caddy.key -subj /CN=website.caddy.test -out endpoint.csr
+ printf subjectAltName=DNS:website.caddy.test
+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.caddy.crt
Certificate request self-signature ok
subject=CN=website.caddy.test
+ cat /output/website.caddy.crt /input/pki-root-ca/ca.crt
✓ Generated file: cert-website.caddy/website.caddy.crt
✓ Generated file: cert-website.caddy/website.caddy.fullchain.crt
✓ Generated file: cert-website.caddy/website.caddy.key
✓ Generator cert-website.caddy completed
Executing generator: state-version
+ set -euo pipefail
+ PATH=/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ echo -n 26.05
✓ Generated file: state-version/version
✓ Generator state-version completed
✓ Machine caddy completed
Processing machine: client
Generator execution order: state-version
Executing generator: state-version
+ set -euo pipefail
+ PATH=/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ echo -n 26.05
✓ Generated file: state-version/version
✓ Generator state-version completed
✓ Machine client completed
Processing machine: nginx
Generator execution order: cert-website.nginx -> state-version
Executing generator: cert-website.nginx
+ set -euo pipefail
+ PATH=/nix/store/4qf8745jx1jbrhydy07gvz7bw7zp9y1d-openssl-3.6.3-bin/bin:/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/website.nginx.key 4096
+ openssl req -new -key /output/website.nginx.key -subj /CN=website.nginx.test -out endpoint.csr
+ printf subjectAltName=DNS:website.nginx.test
+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.nginx.crt
Certificate request self-signature ok
subject=CN=website.nginx.test
+ cat /output/website.nginx.crt /input/pki-root-ca/ca.crt
✓ Generated file: cert-website.nginx/website.nginx.crt
✓ Generated file: cert-website.nginx/website.nginx.fullchain.crt
✓ Generated file: cert-website.nginx/website.nginx.key
✓ Generator cert-website.nginx completed
Executing generator: state-version
+ set -euo pipefail
+ PATH=/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ echo -n 26.05
✓ Generated file: state-version/version
✓ Generator state-version completed
✓ Machine nginx completed
✓ All vars checks completed successfully