From 6b9d98e70f9adc286a65381ad36087f3ab33cda9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Tue, 3 Feb 2026 05:35:50 +0100
Subject: [PATCH] fixup! pki: add new vault root ca to pki

---
 services/vault/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/services/vault/default.nix b/services/vault/default.nix
index bb30d60..3550169 100644
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -111,4 +111,9 @@ in
     # Auto-unseal on service start
     ExecStartPost = "${unsealScript}/bin/openbao-unseal";
   };
+
+  security.acme.certs."vault01.home.2rjus.net" = {
+    server = "https://vault01.home.2rjus.net:8200/v1/pki_int/acme/directory";
+    # extraDomainNames = [ "vault.home.2rjus.net" ];
+  };
 }