From bf2b313365b83f9d9208c10247ae3216768c270b Mon Sep 17 00:00:00 2001
From: Giel van Schijndel <giel@mortis.eu>
Date: Sun, 28 Sep 2025 18:57:36 +0200
Subject: [PATCH] fix(acme): request certificates for the extra domains too

Instead of just making it _possible_ to perform the name validation...
---
 mail-server/nginx.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/mail-server/nginx.nix b/mail-server/nginx.nix
index 75ebc4c..5433f03 100644
--- a/mail-server/nginx.nix
+++ b/mail-server/nginx.nix
@@ -48,9 +48,12 @@ in
           };
         };
 
-        security.acme.certs."${cfg.acmeCertificateName}".reloadServices = [
-          "postfix.service"
-          "${dovecotUnitName}.service"
-        ];
+        security.acme.certs."${cfg.acmeCertificateName}" = {
+          extraDomainNames = cfg.certificateDomains;
+          reloadServices = [
+            "postfix.service"
+            "${dovecotUnitName}.service"
+          ];
+        };
       };
 }