From 9b598c4590f559cdef5cf53d5a1f5a80ab2000d1 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 8 Nov 2025 21:23:53 +1100
Subject: [PATCH] chore: add stalwart required tls alt names

- add alt-names for service addresses stalwart is expected to reply too
---
 hieradata/roles/infra/mail/backend.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hieradata/roles/infra/mail/backend.yaml b/hieradata/roles/infra/mail/backend.yaml
index 79ac007..ae937b0 100644
--- a/hieradata/roles/infra/mail/backend.yaml
+++ b/hieradata/roles/infra/mail/backend.yaml
@@ -7,7 +7,13 @@ hiera_include:
 # additional altnames
 profiles::pki::vault::alt_names:
   - mail.main.unkin.net
+  - mail-webadmin.main.unkin.net
   - imap.main.unkin.net
+  - imaps.main.unkin.net
+  - smtp.main.unkin.net
+  - main-in.main.unkin.net
+  - autoconfig.main.unkin.net
+  - autodiscovery.main.unkin.net
 
 # manage a pgsql database + user
 profiles::sql::postgresdb::cluster_name: "patroni-shared-%{facts.environment}"