From 8e2504024cef8b43239ba106e4da3017ff1233d8 Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 25 Jul 2026 22:44:21 +0200
Subject: fix(acme): request wildcard certificate

---
 modules/services/acme.nix | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/modules/services/acme.nix b/modules/services/acme.nix
index 0b6c475..128715c 100644
--- a/modules/services/acme.nix
+++ b/modules/services/acme.nix
@@ -4,16 +4,15 @@
     {
       security.acme = {
         acceptTerms = true;
-        defaults.server = "https://acme.ionos.com/directory";
-        certs."schererleander.de" = {
-          extraDomainNames = [
-            "cloud.schererleander.de"
-            "git.schererleander.de"
-          ];
+        defaults = {
+          server = "https://acme.ionos.com/directory";
           extraLegoFlags = [ "--eab" ];
           environmentFile = config.sops.secrets."ionos-acme-env".path;
           group = "nginx";
         };
+        certs."schererleander.de" = {
+          domain = "*.schererleander.de";
+        };
       };
 
       services.nginx.virtualHosts."schererleander.de" = {
-- 
cgit v1.3.1