From d98115d854fc813f0230f892548b703ed8405f2f Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Mon, 13 Dec 2021 08:52:10 -0800
Subject: [PATCH] Include host-fqdn in ssl cert for Jabber

---
 lib/fudo/jabber.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/fudo/jabber.nix b/lib/fudo/jabber.nix
index 34b10d4..50e4c64 100644
--- a/lib/fudo/jabber.nix
+++ b/lib/fudo/jabber.nix
@@ -200,9 +200,12 @@ in {
       allowedTCPPorts = [ 5222 5223 5269 8010 ];
     };
 
-    fudo = {
+    fudo = let
+      host-fqdn = config.instance.host-fqdn;
+    in {
       acme.host-domains.${hostname} = mapAttrs (site: siteCfg:
         mkIf siteCfg.enableACME {
+          extra-domains = optional (site != host-fqdn) [ host-fqdn ];
           local-copies.ejabberd = {
             user = cfg.user;
             group = cfg.group;