Berwn 1dd3aadb97 Add mail.cnx.email client alias as a cert SAN ...

A mail.cnx.email CNAME (-> mx1.cnx.email) lets clients (Thunderbird etc.)
use a friendly hostname for submission/IMAP. To avoid a TLS name
mismatch the cert now carries mail.cnx.email as a SAN, so the acme_mx1
key is authorized to write _acme-challenge.mail too. The MX still points
at mx1.cnx.email and --reuse-key keeps the DANE TLSA digest valid across
the re-issue.

2026-06-18 15:01:03 +07:00

..

control

Onboard mx1 mail host and factor out per-host public IPs

2026-06-18 11:53:14 +07:00

mx1

Format drifted files to satisfy the treefmt flake-check gate

2026-06-18 14:49:48 +07:00

ns1

Add mail.cnx.email client alias as a cert SAN

2026-06-18 15:01:03 +07:00

ns2

Onboard mx1 mail host and factor out per-host public IPs

2026-06-18 11:53:14 +07:00