From 4ba9f036edcd54228dbd2cd31ccccbfcb224c7a3 Mon Sep 17 00:00:00 2001
From: Aleksander <170264518+t-aleksander@users.noreply.github.com>
Date: Fri, 6 Feb 2026 12:10:15 +0100
Subject: [PATCH 1/3] fix

---
 crates/defguard_core/src/lib.rs | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/crates/defguard_core/src/lib.rs b/crates/defguard_core/src/lib.rs
index 68adeb2ba5..648c68b8cc 100644
--- a/crates/defguard_core/src/lib.rs
+++ b/crates/defguard_core/src/lib.rs
@@ -13,6 +13,7 @@ use axum::{
     routing::{delete, get, post, put},
     serve,
 };
+use defguard_certs::CertificateAuthority;
 use defguard_common::{
     VERSION,
     auth::claims::{Claims, ClaimsType},
@@ -20,8 +21,9 @@ use defguard_common::{
     db::{
         init_db,
         models::{
-            Device, DeviceType, User, WireguardNetwork,
+            Device, DeviceType, Settings, User, WireguardNetwork,
             oauth2client::OAuth2Client,
+            settings::{initialize_current_settings, update_current_settings},
             wireguard::{
                 DEFAULT_DISCONNECT_THRESHOLD, DEFAULT_KEEPALIVE_INTERVAL, DEFAULT_WIREGUARD_MTU,
                 LocationMfaMode, ServiceLocationMode,
@@ -632,6 +634,7 @@ pub async fn run_web_server(
 /// Test device keys:
 /// Public: gQYL5eMeFDj0R+lpC7oZyIl0/sNVmQDC6ckP7husZjc=
 /// Private: wGS1qdJfYbWJsOUuP1IDgaJYpR+VaKZPVZvdmLjsH2Y=
+#[allow(deprecated)]
 pub async fn init_dev_env(config: &DefGuardConfig) {
     info!("Initializing dev environment");
     let pool = init_db(
@@ -648,6 +651,23 @@ pub async fn init_dev_env(config: &DefGuardConfig) {
         .await
         .expect("Failed to create admin user");
 
+    let ca = CertificateAuthority::new("Defguard Dev", "defguard-dev@defguard.net", 5000)
+        .expect("Failed to create CA");
+
+    initialize_current_settings(&pool)
+        .await
+        .expect("Could not initialize current settings in the database");
+    let mut settings = Settings::get_current_settings();
+    settings.ca_cert_der = Some(ca.cert_der().to_vec());
+    settings.ca_key_der = Some(ca.key_pair_der().to_vec());
+    settings.ca_expiry = Some(ca.expiry().expect("Failed to get CA expiry"));
+    settings.initial_setup_completed = true;
+    // This should possibly be initialized somehow differently in the future since we are deprecating the enrollment URL env var.
+    settings.public_proxy_url = config.enrollment_url.to_string();
+    update_current_settings(&pool, settings)
+        .await
+        .expect("Failed to update settings with CA");
+
     let mut transaction = pool
         .begin()
         .await

From 8089eb94382784c593a3feb8ef798ae32b38d14a Mon Sep 17 00:00:00 2001
From: Aleksander <170264518+t-aleksander@users.noreply.github.com>
Date: Fri, 6 Feb 2026 12:11:59 +0100
Subject: [PATCH 2/3] Update lib.rs

---
 crates/defguard_core/src/lib.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crates/defguard_core/src/lib.rs b/crates/defguard_core/src/lib.rs
index 648c68b8cc..22a0a9367e 100644
--- a/crates/defguard_core/src/lib.rs
+++ b/crates/defguard_core/src/lib.rs
@@ -666,7 +666,7 @@ pub async fn init_dev_env(config: &DefGuardConfig) {
     settings.public_proxy_url = config.enrollment_url.to_string();
     update_current_settings(&pool, settings)
         .await
-        .expect("Failed to update settings with CA");
+        .expect("Failed to update settings");
 
     let mut transaction = pool
         .begin()

From 57046c3ce67b2f21c6d0432acc5be04de3b643a8 Mon Sep 17 00:00:00 2001
From: Aleksander <170264518+t-aleksander@users.noreply.github.com>
Date: Fri, 6 Feb 2026 12:25:43 +0100
Subject: [PATCH 3/3] defguard url

---
 crates/defguard_core/src/lib.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crates/defguard_core/src/lib.rs b/crates/defguard_core/src/lib.rs
index 22a0a9367e..4376560948 100644
--- a/crates/defguard_core/src/lib.rs
+++ b/crates/defguard_core/src/lib.rs
@@ -664,6 +664,7 @@ pub async fn init_dev_env(config: &DefGuardConfig) {
     settings.initial_setup_completed = true;
     // This should possibly be initialized somehow differently in the future since we are deprecating the enrollment URL env var.
     settings.public_proxy_url = config.enrollment_url.to_string();
+    settings.defguard_url = config.url.to_string();
     update_current_settings(&pool, settings)
         .await
         .expect("Failed to update settings");