use wildcard cert

2025-08-23 22:24:53 -05:00
parent aafa815171
commit c250bebcb6
2 changed files with 3 additions and 3 deletions
@@ -183,8 +183,8 @@ EOF
            enable = true;
            virtualHosts.${opts.default-nginx.hostname} = {
              forceSSL = true;
-              enableACME = true;
-              acmeRoot = null;
+              # Parse TLD from hostname to use wildcard cert
+              useACMEHost = (domain: let parts = lib.strings.split "." domain; len = builtins.length parts; in if len>=2 then lib.strings.concatStringsSep "." (lib.lists.drop (len - 2) parts) else domain) "${opts.default-nginx.hostname}";

              # This does not work even with the MINIO_BROWSER_REDIRECT_URL set
              locations."/console" = {