From 5f43998de8c1732d3ab707b21ca194f0d3770305 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Sat, 10 May 2025 19:45:17 +0200
Subject: [PATCH] dns update 2

---
 hosts/falkenstein/modules/dns/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/falkenstein/modules/dns/default.nix b/hosts/falkenstein/modules/dns/default.nix
index c0b96cc..c9e79b1 100644
--- a/hosts/falkenstein/modules/dns/default.nix
+++ b/hosts/falkenstein/modules/dns/default.nix
@@ -38,6 +38,7 @@ let
       let
         getVirtualHosts = hostname: map (name: builtins.substring 0 (builtins.stringLength name - (builtins.stringLength domain + 1)) name) (builtins.attrNames self.nixosConfigurations."${hostname}".config.services.caddy.virtualHosts);
         genCNAMEs = hostname: lib.attrsets.genAttrs (getVirtualHosts hostname) (_label: { CNAME = [ "${hostname}.${domain}." ]; });
+        genACMECNAMEs = hostname: lib.attrsets.genAttrs (getVirtualHosts hostname) (_label: { subdomains._acme-challenge.CNAME = [ "challenge.acme.${domain}." ]; });
       in
       lib.attrsets.mergeAttrsList [
         rec {
@@ -58,6 +59,7 @@ let
           "*".subdomains."_acme-challenge".CNAME = [ "challenge.acme.rfive.de" ];
         }
         (builtins.removeAttrs (genCNAMEs "nuc") ([ ":2018" ] ++ (builtins.filter (host: lib.strings.hasInfix "vpn" host) (getVirtualHosts "nuc"))))
+        (builtins.removeAttrs (genACMECNAMEs "nuc") ([ ":2018" ]))
         (builtins.removeAttrs (genCNAMEs "falkenstein") [ "mail" ":2018" ])
       ];
   });