From 88d6dc620b563e49a13ce0d3ac6d52ce6bfb1896 Mon Sep 17 00:00:00 2001
From: nexxo <nexxo@clupilot.local>
Date: Thu, 30 Jul 2026 10:38:12 +0200
Subject: [PATCH] Stop the suite from reading the operator's own .env for the
 DNS zone

HostStepsTest asserted fsn-01.node.clupilot.com and was green only because
this server's .env carried the wrong zone. Correcting the .env turned it red
without a line of production code changing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 phpunit.xml                                  | 8 ++++++++
 tests/Feature/Provisioning/HostStepsTest.php | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/phpunit.xml b/phpunit.xml
index e1bffaa..bbd3a88 100644
--- a/phpunit.xml
+++ b/phpunit.xml
@@ -35,6 +35,14 @@
              an invalid signature. The two tests that DO exercise verification
              set the secret themselves. -->
         <env name="STRIPE_WEBHOOK_SECRET" value="" force="true"/>
+        <!-- Pinned so the suite stops depending on the operator's .env. It did:
+             HostStepsTest asserted `fsn-01.node.clupilot.com` and passed only
+             because this server's .env carried the wrong zone. Correcting the
+             .env turned a green test red without a line of production code
+             changing — a test that reads the developer's machine proves
+             nothing about the code. The value is the one the code itself
+             defaults to. -->
+        <env name="CLUPILOT_DNS_ZONE" value="clupilot.cloud" force="true"/>
         <env name="APP_MAINTENANCE_DRIVER" value="file"/>
         <env name="BCRYPT_ROUNDS" value="4" force="true"/>
         <env name="BROADCAST_CONNECTION" value="null" force="true"/>
diff --git a/tests/Feature/Provisioning/HostStepsTest.php b/tests/Feature/Provisioning/HostStepsTest.php
index 7207806..19b04e3 100644
--- a/tests/Feature/Provisioning/HostStepsTest.php
+++ b/tests/Feature/Provisioning/HostStepsTest.php
@@ -1061,7 +1061,7 @@ it('gives the host a name that points at the tunnel, not at its public address',
     // The management address: publishing a Proxmox host's public IP would hand
     // every scanner a target. Written to the internal hostsdir, not upserted
     // anywhere via the (public) Hetzner client — see the mutation test below.
-    expect($s['hostDns']->fqdns['fsn-01'])->toBe('fsn-01.node.clupilot.com')
+    expect($s['hostDns']->fqdns['fsn-01'])->toBe('fsn-01.node.clupilot.cloud')
         ->and($s['hostDns']->ips['fsn-01'])->toBe('10.66.0.11')
         ->and($s['hostDns']->ips['fsn-01'])->not->toBe('203.0.113.11');
 });