Berwn 1dd3aadb97 Add mail.cnx.email client alias as a cert SAN ...

A mail.cnx.email CNAME (-> mx1.cnx.email) lets clients (Thunderbird etc.)
use a friendly hostname for submission/IMAP. To avoid a TLS name
mismatch the cert now carries mail.cnx.email as a SAN, so the acme_mx1
key is authorized to write _acme-challenge.mail too. The MX still points
at mx1.cnx.email and --reuse-key keeps the DANE TLSA digest valid across
the re-issue.

2026-06-18 15:01:03 +07:00

..

zones

Add mail.cnx.email client alias as a cert SAN

2026-06-18 15:01:03 +07:00

acme-mx1-secret.nix

Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

2026-06-18 14:47:20 +07:00

authoritative.nix

Format drifted files to satisfy the treefmt flake-check gate

2026-06-18 14:49:48 +07:00

domains.nix

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00