setup

commit 515afe702e9eb6d7961b4e322c26990a7ee33922
parent 7227cfdf5c0625cb03e5c7931971d99b904fedc5
Author: pyratebeard <root@pyratebeard.net>
Date:   Sun, 16 Aug 2026 10:49:13 +0100

feat(playbook): add headscale subdomain to cert principals

Diffstat:
M
playbook.yml
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/playbook.yml b/playbook.yml
@@ -150,7 +150,7 @@
       vars:
         hostca_key_passphrase: "{{ lookup('community.general.bitwarden', 'hostca-' + domain + '-passphrase', field='password') }}"
       ansible.builtin.expect:
-        command: ssh-keygen -s /etc/ssh/hostca-{{ domain }} -h -I {{ hostname }}@{{ domain }} -n {{ hostname }}.{{ domain }},{{ hostname }} /etc/ssh/ssh_host_ed25519_key.pub
+        command: ssh-keygen -s /etc/ssh/hostca-{{ domain }} -h -I {{ hostname }}@{{ domain }} -n {{ hostname }}.{{ domain }},{{ hostname }},{{ hostname }}.hs.{{ domain }} /etc/ssh/ssh_host_ed25519_key.pub
         responses:
           Enter passphrase: "{{ hostca_key_passphrase }}"
       no_log: true