From 79ff9db5a92eaa902cd1fdc4f6007ad84e638c39 Mon Sep 17 00:00:00 2001
From: Christoph Hollizeck <christoph.hollizeck@hey.com>
Date: Thu, 26 Mar 2026 10:35:07 +0100
Subject: [PATCH] loptland: include new domain

---
 modules/hosts/loptland/nginx.nix | 16 ++++++++++++++++
 modules/server/acme.nix          |  5 +++++
 2 files changed, 21 insertions(+)

diff --git a/modules/hosts/loptland/nginx.nix b/modules/hosts/loptland/nginx.nix
index 0ceda04..dcd2499 100644
--- a/modules/hosts/loptland/nginx.nix
+++ b/modules/hosts/loptland/nginx.nix
@@ -59,6 +59,22 @@
             };
           };
 
+          "cholli.de" = {
+            forceSSL = true;
+            useACMEHost = "cholli.de";
+            globalRedirect = domainName;
+          };
+
+          "~^(?<subdomain>.+)\\.cholli\\.de$" = {
+            forceSSL = true;
+            useACMEHost = "cholli.de";
+            locations."/" = {
+              extraConfig = ''
+                return 301 https://$subdomain.${domainName}$request_uri;
+              '';
+            };
+          };
+
           "_" = {
             forceSSL = true;
             useACMEHost = domainName;
diff --git a/modules/server/acme.nix b/modules/server/acme.nix
index 81d509f..0aba9d4 100644
--- a/modules/server/acme.nix
+++ b/modules/server/acme.nix
@@ -54,6 +54,11 @@ topLevel: {
           dnsResolver = "1.1.1.1:53";
           extraDomainNames = [ "*.${domainname}" ];
         };
+
+        certs."cholli.de" = {
+          dnsResolver = "1.1.1.1:53";
+          extraDomainNames = [ "*.cholli.de" ];
+        };
       };
 
     };