From bd2ba125e5df2e96ae3ff84ec71a193caff4606e Mon Sep 17 00:00:00 2001
From: sid <sid@sid.ovh>
Date: Sun, 19 Apr 2026 03:27:48 +0200
Subject: [PATCH] list all internal fqdns in sid-internal

---
 hosts/sid/services/step-ca.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/hosts/sid/services/step-ca.nix b/hosts/sid/services/step-ca.nix
index 8ce01bd..45a43ae 100644
--- a/hosts/sid/services/step-ca.nix
+++ b/hosts/sid/services/step-ca.nix
@@ -73,7 +73,12 @@ in
 
   security.acme = {
     certs."sid-internal" = {
-      domain = "*.${constants.intranet}";
+      domain = constants.intranet;
+      extraDomainNames = [
+        constants.services.netdata.fqdn
+        constants.services.vaultwarden.fqdn
+        constants.services.webdav.fqdn
+      ];
       server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
       group = "nginx";
     };