anchor.diff:        };
   
         security = {
  -        pki.certificateFiles = [ "${test-certificates}/root_ca.crt" ];
  +        pki.certificateFiles = [ "${cert pkgs}/cert.pem" ];
         };
       };
     };
   
     testScript = ''
       start_all()
  -
  -    ca.wait_for_unit("step-ca.service")
  -    ca.wait_for_open_port(8443)
   
       # Check that mastodon-media-auto-remove is scheduled
       server.succeed("systemctl status mastodon-media-auto-remove.timer")
  
positive.code:   meta.maintainers = with pkgs.lib.maintainers; [ erictapen izorkin turion ];
  
    nodes = {
      ca = { pkgs, ... }: {
        networking = {
          interfaces.eth1 = {
            ipv4.addresses = [
              { address = "192.168.2.10"; prefixLength = 24; }
            ];
          };
          extraHosts = hosts;
        };
        services.step-ca = {
          enable = true;
          address = "0.0.0.0";
          port = 8443;
          openFirewall = true;
          intermediatePasswordFile = "${test-certificates}/intermediate-password-file";
          settings = {
            dnsNames = [ "ca.local" ];
            root = "${test-certificates}/root_ca.crt";
            crt = "${test-certificates}/intermediate_ca.crt";
            key = "${test-certificates}/intermediate_ca.key";
            db = {
              type = "badger";
              dataSource = "/var/lib/step-ca/db";
            };
            authority = {
              provisioners = [
                {
                  type = "ACME";
                  name = "acme";
                }
              ];
            };
          };
        };
      };
  
      server = { pkgs, ... }: {
  
        virtualisation.memorySize = 2048;
  
negative.code:           EMAIL_DOMAIN_ALLOWLIST = "example.com";
          };
        };
  
        services.nginx = {
          virtualHosts."mastodon.local" = {
            enableACME = pkgs.lib.mkForce false;
            sslCertificate = "${cert pkgs}/cert.pem";
            sslCertificateKey = "${cert pkgs}/key.pem";
          };
        };
      };
  
      client = { pkgs, ... }: {
  