From d1b0a5dc20f514e4c3acf86415fdeec3f6f6eb3b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Mon, 9 Feb 2026 22:33:45 +0100
Subject: [PATCH] monitoring: accept any HTTP status in TLS probe

Only care about TLS handshake success for certificate monitoring.
Services like nzbget (401) and ha (400) return non-2xx but have
valid certificates.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 services/monitoring/blackbox.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/monitoring/blackbox.nix b/services/monitoring/blackbox.nix
index 97b204e..bcc7308 100644
--- a/services/monitoring/blackbox.nix
+++ b/services/monitoring/blackbox.nix
@@ -39,6 +39,7 @@ in
           http:
             fail_if_not_ssl: true
             preferred_ip_protocol: ip4
+            valid_status_codes: []  # Accept any status, we only care about TLS
     '';
   };