feat: use one acme host for the whole domain

2026-06-02 12:54:17 +02:00
parent 17e85e83b9
commit 0f39cfdf32
2 changed files with 23 additions and 5 deletions
@@ -20,17 +20,16 @@ in
    };
  };

-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "admin@${domain}";
-  };
+  security.acme.certs.${domain}.extraDomainNames = [
+    vaultDomain
+  ];

  services.nginx = {
    enable = true;

    virtualHosts.${vaultDomain} = {
      forceSSL = true;
-      enableACME = true;
+      useACMEHost = config.kekleo.domain;
      locations."/" = {
        proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
        proxyWebsockets = true;