fixup! pki: add new vault root ca to pki

2026-02-03 06:40:57 +01:00
parent 903f44edc3
commit 62798739b8
2 changed files with 36 additions and 0 deletions
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -195,6 +195,8 @@ in
    SupplementaryGroups = [ "acme" ];
  };

+  # ACME certificate management
+  # Bootstrapped with bootstrap-vault-cert, now managed by ACME
  security.acme.certs."vault01.home.2rjus.net" = {
    server = "https://vault01.home.2rjus.net:8200/v1/pki_int/acme/directory";
    listenHTTP = ":80";