From ed8f7258538bcf3f2d2d62ab497a895ee441b41b Mon Sep 17 00:00:00 2001
From: sefidel <contact@sefidel.net>
Date: Mon, 6 Feb 2023 18:11:33 +0900
Subject: feat(nixos/cobalt): acme: specify subdomains instead of wildcard

---
 nixos/cobalt/services/acme.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'nixos/cobalt')

diff --git a/nixos/cobalt/services/acme.nix b/nixos/cobalt/services/acme.nix
index b41ae1c..d28bfc7 100644
--- a/nixos/cobalt/services/acme.nix
+++ b/nixos/cobalt/services/acme.nix
@@ -7,7 +7,11 @@ in
     defaults.email = poorObfuscation "sefidel.com" "postmaster";
     certs = {
       "sefidel.com" = {
-        domain = "*.sefidel.com";
+        domain = "sefidel.com";
+        extraDomainNames = [
+          "bouncer.sefidel.com"
+          "git.sefidel.com"
+        ];
         dnsProvider = "hetzner";
         dnsPropagationCheck = true;
         credentialsFile = "/persist/secrets/hetzner.key";
-- 
cgit 1.4.1