demiurge: switch back to using self-signed cert instead of step-ca

step-ca was being a massive pain when I switched the domain from
demiurge.vpn to demiurge.epistemia. After a long time of trying to see
why it couldn't connect, it later switched to rejectedIdentifier and I
had no idea how to fix it. (one of the github issues on it had
maintainer saying they're closing due to being unable to reproduce)

1 files changed, 9 insertions, 1 deletions

diff --git a/hosts/saklas/default.nix b/hosts/saklas/default.nix
index 2c1a2b8..e8a79f6 100644
--- a/hosts/saklas/default.nix
+++ b/hosts/saklas/default.nix
@@ -155,7 +155,15 @@
       port = 8080;
       settings = {
         server_url = "https://headscale.13f0.net";
-        dns.base_domain = "epistemia";
+        dns = {
+          base_domain = "epistemia";
+          extra_records = [
+            { name = "navidrome.demiurge.epistemia"; type = "A"; value = "100.64.0.5"; }
+            { name = "redlib.demiurge.epistemia"; type = "A"; value = "100.64.0.5"; }
+            { name = "sdui.demiurge.epistemia"; type = "A"; value = "100.64.0.5"; }
+            { name = "searx.demiurge.epistemia"; type = "A"; value = "100.64.0.5"; }
+          ];
+        };
         logtail.enabled = false;
       };
     };