From 0d5fb7302215f9731fb221428a821a57a5ad0c8b Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@hoyer.xyz>
Date: Sun, 3 May 2026 16:03:57 +0200
Subject: [PATCH] fix(amd): opencode

---
 systems/x86_64-linux/amd/acme.nix  | 8 ++++++++
 systems/x86_64-linux/amd/nginx.nix | 3 ++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/systems/x86_64-linux/amd/acme.nix b/systems/x86_64-linux/amd/acme.nix
index fefc75d..ccc8d2e 100644
--- a/systems/x86_64-linux/amd/acme.nix
+++ b/systems/x86_64-linux/amd/acme.nix
@@ -8,4 +8,12 @@
   };
 
   metacfg.services.acmeBase.credentialsFile = config.sops.secrets.internetbs.path;
+
+    security.acme.certs = {
+    "amd.hoyer.world" = {
+      extraDomainNames = [
+        "opencode.amd.hoyer.world"
+      ];
+    };
+  };
 }
diff --git a/systems/x86_64-linux/amd/nginx.nix b/systems/x86_64-linux/amd/nginx.nix
index 1e0d0c5..79c8269 100644
--- a/systems/x86_64-linux/amd/nginx.nix
+++ b/systems/x86_64-linux/amd/nginx.nix
@@ -4,7 +4,8 @@
 {
   services.nginx.virtualHosts = {
     "opencode.amd.hoyer.world" = {
-      enableACME = true;
+      enableACME = false;
+      useACMEHost = "amd.hoyer.world";
       forceSSL = true;
       locations."/" = {
         proxyPass = "http://127.0.0.1:4196";