From 302f6f7efa46feb8b5df4be7486bd3d64f8352fb Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Wed, 9 Sep 2026 12:20:57 +0200 Subject: [PATCH] Allow overriding the dev server TLS certificate via environment EC_DEV_TLS_KEY / EC_DEV_TLS_CERT point vite at a key pair the developer's browser already trusts, instead of the checked-in Element Call Dev CA. Co-Authored-By: Claude Fable 5.1 --- vite.config.ts | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/vite.config.ts b/vite.config.ts index 678a86fab..3ee40be24 100644 --- a/vite.config.ts +++ b/vite.config.ts @@ -125,8 +125,14 @@ export default ({ port: 3000, fs: { allow }, https: { - key: fs.readFileSync("./backend/dev_tls_m.localhost.key"), - cert: fs.readFileSync("./backend/dev_tls_m.localhost.crt"), + // EC_DEV_TLS_KEY / EC_DEV_TLS_CERT let a developer serve a certificate + // their browser already trusts (e.g. one signed by a local mkcert root). + key: fs.readFileSync( + process.env.EC_DEV_TLS_KEY ?? "./backend/dev_tls_m.localhost.key", + ), + cert: fs.readFileSync( + process.env.EC_DEV_TLS_CERT ?? "./backend/dev_tls_m.localhost.crt", + ), }, }, worker: {