anchor.diff:  
       # Waiting for pleroma to be up.
       timeout 5m bash -c 'while [[ "$(curl -s -o /dev/null -w '%{http_code}' https://pleroma.nixos.test/api/v1/instance)" != "200" ]]; do sleep 2; done'
  -    pleroma_ctl user new jamy jamy@nixos.test --password 'jamy-password' --moderator --admin -y
  +    # Toremove the RELEASE_COOKIE bit when https://github.com/NixOS/nixpkgs/issues/166229 gets fixed.
  +    RELEASE_COOKIE="/var/lib/pleroma/.cookie" \
  +      pleroma_ctl user new jamy jamy@nixos.test --password 'jamy-password' --moderator --admin -y
     '';
   
     tls-cert = pkgs.runCommand "selfSignedCerts" { buildInputs = [ pkgs.openssl ]; } ''
  
positive.code:     # system one. Overriding this pretty bad default behaviour.
      export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
  
      export TOOT_LOGIN_CLI_PASSWORD="jamy-password"
      toot login_cli -i "pleroma.nixos.test" -e "jamy@nixos.test"
      echo "Login OK"
  
      # Send a toot then verify it's part of the public timeline
  
negative.code:       security.pki.certificateFiles = [ "${tls-cert}/cert.pem" ];
        networking.extraHosts = hosts nodes;
        environment.systemPackages = with pkgs; [
          toot
          send-toot
        ];
      };
  