From 2c9fb3d86ab0a8d4bc2c45512fc972cf06d530d5 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 8 Nov 2025 21:28:41 +1100
Subject: [PATCH] chore: add stalwart required tls alt names (#422)

- add alt-names for service addresses stalwart is expected to reply too

Reviewed-on: https://git.unkin.net/unkin/puppet-prod/pulls/422
---
 hieradata/roles/infra/mail/backend.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hieradata/roles/infra/mail/backend.yaml b/hieradata/roles/infra/mail/backend.yaml
index 79ac007..ae937b0 100644
--- a/hieradata/roles/infra/mail/backend.yaml
+++ b/hieradata/roles/infra/mail/backend.yaml
@@ -7,7 +7,13 @@ hiera_include:
 # additional altnames
 profiles::pki::vault::alt_names:
   - mail.main.unkin.net
+  - mail-webadmin.main.unkin.net
   - imap.main.unkin.net
+  - imaps.main.unkin.net
+  - smtp.main.unkin.net
+  - main-in.main.unkin.net
+  - autoconfig.main.unkin.net
+  - autodiscovery.main.unkin.net
 
 # manage a pgsql database + user
 profiles::sql::postgresdb::cluster_name: "patroni-shared-%{facts.environment}"