Move test.wiki.nixos.org to more modern TLS configuration
The new configuration comes with TLS1.2/1.3 and HTTP1.1/2/3 support. The fastly webinterface only lists n.sni.global.fastly.net, but the dualstack hostname exists and I think it's worth giving it a shot.
Martin Weinelt committed
Nov 4, 2025 at 02:12 UTC
87e6943191492a91179f24b51165b128c0d63059
3 files changed
+5
-2
dns/nixos.org.js
+1
-1
@@ -170,7 +170,7 @@ D("nixos.org",
170
TXT("mail._domainkey.wiki", "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDa+KjIljYr3q5MWWK7sEYzjR8OcA32zBh9BCPo6/HlY1q2ODTYsmE/FDZWpYMzM5z+ddnuGYdXia322XnZaNpZNoq1TbGYuQ5DsgAEK09CGoLuzONg3PSXTrkG7E2Sd6wstwHGJ5FHxSLKtNoWkknt9F5XAFZgXapO0w54p+BWvwIDAQAB"),
171
172
// test.wiki subdomain with Fastly
173
- CNAME("test.wiki", "dualstack.v2.shared.global.fastly.net."),
173
+ CNAME("test.wiki", "dualstack.n.sni.global.fastly.net."),
174
CNAME("_acme-challenge.test.wiki", "zsz0meyel8hxoy9dtb.fastly-validations.com."),
175
176
// cloudflare pages
terraform/locals.tf
+3
@@ -4,6 +4,9 @@ locals {
4
# TLS v1.2, protocols HTTP/1.1 and HTTP/2
5
fastly_tls12_sni_configuration_id = "5PXBTa6c01Xoh54ylNwmVA"
6
7
+ # TLS1.2 and 1.3+0RTT, HTTP/1.1, HTTP/2 and HTTP/3
8
+ fastly_tls13_quic_configuration_id = "oZPSgSiY0PM8sNTAAyOZHw"
9
+
10
cache-iam = data.terraform_remote_state.terraform-iam.outputs.cache
11
fastlylogs = data.terraform_remote_state.terraform-iam.outputs.fastlylogs
12
terraform/wiki-test.tf
+1
-1
@@ -53,7 +53,7 @@ resource "fastly_service_vcl" "wiki-test" {
53
54
resource "fastly_tls_subscription" "wiki-test" {
55
domains = [for domain in fastly_service_vcl.wiki-test.domain : domain.name]
56
- configuration_id = local.fastly_tls12_sni_configuration_id
56
+ configuration_id = local.fastly_tls13_quic_configuration_id
57
certificate_authority = "lets-encrypt"
58
}
59