anchor.diff:        };
   
         security = {
  -        pki.certificateFiles = [ "${test-certificates}/root_ca.crt" ];
  +        pki.certificateFiles = [ "${cert pkgs}/cert.pem" ];
         };
       };
     };
   
     testScript = ''
       start_all()
  -
  -    ca.wait_for_unit("step-ca.service")
  -    ca.wait_for_open_port(8443)
   
       # Check that mastodon-media-auto-remove is scheduled
       server.succeed("systemctl status mastodon-media-auto-remove.timer")
  
positive.code:           EMAIL_DOMAIN_ALLOWLIST = "example.com";
          };
        };
      };
  
      client = { pkgs, ... }: {
  
negative.code: import ../make-test-python.nix ({pkgs, ...}:
  let
    cert = pkgs: pkgs.runCommand "selfSignedCerts" { buildInputs = [ pkgs.openssl ]; } ''
      openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -nodes -subj '/CN=mastodon.local' -days 36500
      mkdir -p $out
      cp key.pem cert.pem $out
    '';
  
    hosts = ''
      192.168.2.11 mastodon.local
    '';
  
  