From 0ea2f61017c5a90a26d71f2a4d64ce1a500eca92 Mon Sep 17 00:00:00 2001
From: Gabriel Radureau <arcodange@gmail.com>
Date: Fri, 2 Jan 2026 15:07:59 +0100
Subject: [PATCH] use self signed cert

---
 .gitea/workflows/iac.yaml      | 1 +
 .gitea/workflows/postgres.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.gitea/workflows/iac.yaml b/.gitea/workflows/iac.yaml
index 427c265..33d8824 100644
--- a/.gitea/workflows/iac.yaml
+++ b/.gitea/workflows/iac.yaml
@@ -23,6 +23,7 @@ concurrency:
   id: vault-secrets
   with:
     url: https://vault.arcodange.lab
+    caCertificate: ${{ secrets.HOMELAB_CA_CERT }}
     jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
     role: gitea_cicd
     method: jwt
diff --git a/.gitea/workflows/postgres.yaml b/.gitea/workflows/postgres.yaml
index 12ef565..357f3a4 100644
--- a/.gitea/workflows/postgres.yaml
+++ b/.gitea/workflows/postgres.yaml
@@ -21,6 +21,7 @@ concurrency:
   id: vault-secrets
   with:
     url: https://vault.arcodange.lab
+    caCertificate: ${{ secrets.HOMELAB_CA_CERT }}
     jwtGiteaOIDC: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
     role: gitea_cicd
     method: jwt