move redis certificates

nix/image/bootstrap.sh

@@ -59,9 +59,9 @@ if [ -n "${REDIS_TLS:-}" ]
 then
   redis-server --protected-mode no \
     --tls-port 6379 --port 0 \
-    --tls-cert-file /redis-certificates/server.crt \
-    --tls-key-file /redis-certificates/server.key \
-    --tls-ca-cert-file /redis-certificates/ca.crt &
+    --tls-cert-file /certificates/redis/server.crt \
+    --tls-key-file /certificates/redis/server.key \
+    --tls-ca-cert-file /certificates/redis/ca.crt &
 else
   redis-server --protected-mode no &
 fi

nix/image/configs/nc/redis-tls.php

@@ -2,9 +2,9 @@
         'host' => 'tls://127.0.0.1',
         'port' => 6379,
         'ssl_context' => [
-           'local_cert' => '/redis-certificates/client.crt',
-           'local_pk' => '/redis-certificates/client.key',
-           'cafile' => '/redis-certificates/ca.crt',
+           'local_cert' => '/certificates/redis/client.crt',
+           'local_pk' => '/certificates/redis/client.key',
+           'cafile' => '/certificates/redis/ca.crt',
            'verify_peer_name' => false,
         ],
 	  ],

nix/image/haze.nix

@@ -104,9 +104,9 @@
     '';
   };
 
-  redis-certificates = runCommand "scripts" {} ''
+  certificates = runCommand "scripts" {} ''
     mkdir -p $out
-    cp -r ${../../redis-certificates} $out/redis-certificates
+    cp -r ${../../certificates} $out/certificates
   '';
   clamav-data = runCommand "scripts" {} ''
     mkdir -p $out/etc
@@ -170,7 +170,7 @@ in
       bootstrap
       configs
       scripts
-      redis-certificates
+      certificates
       clamav-data
       shadowSetupScript
     ];