all repos — nixfiles @ 1e7faab27c8b81cc690c83d439f894d0108acf61

System and user configuration, managed by nix and home-manager

local-ca: prefer more obvious domain label "acme"

Alin
commit

1e7faab27c8b81cc690c83d439f894d0108acf61

parent

703b38d2ff73a75c895e583d16f097c8ed791c22

1 file changed, 6 insertions(+), 3 deletions(-)

changed files
M system/roles/local-ca.nix → system/roles/local-ca.nix
@@ -26,9 +26,12 @@ }
           }
         '';
       };
-      "ca.${domain}" = {
+      "acme.${domain}" = {
         # cd /var/lib/caddy && install -D -m 444 .local/share/caddy/pki/authorities/home/root.crt ca/root.crt
-        serverAliases = [ "http://ca.${domain}" ];
+        serverAliases = [
+          "ca.${domain}"
+          "http://ca.${domain}"
+        ];
         extraConfig = ''
           tls {
             issuer internal {

@@ -49,6 +52,6 @@ };
   };
 
   services.dnsmasq.settings.cname = [
-    "ca.${domain},${hostName}.${domain}"
+    "acme.${domain},ca.${domain},${hostName}.${domain}"
   ];
 }