fixup! pki: add new vault root ca to pki

2026-02-03 05:35:50 +01:00
parent 0cc3c9888d
commit 6b9d98e70f
1 changed files with 5 additions and 0 deletions
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -111,4 +111,9 @@ in
    # Auto-unseal on service start
    ExecStartPost = "${unsealScript}/bin/openbao-unseal";
  };
+
+  security.acme.certs."vault01.home.2rjus.net" = {
+    server = "https://vault01.home.2rjus.net:8200/v1/pki_int/acme/directory";
+    # extraDomainNames = [ "vault.home.2rjus.net" ];
+  };
 }