From 8cf87483d63f26609cebe5484717df700d1d13f5 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sat, 24 Oct 2026 17:47:14 +0200 Subject: [PATCH] node001: tunnel foto.scoutingmbg.nl to the home cluster The group's DNS now points foto.scoutingmbg.nl at rubenhensen.nl, which is this server, instead of mbg.hensen.io (the home IP). Resolvers that had picked up the change got node001's own certificate and no immich. Add the host to the SNI passthrough and the port 80 proxy like the other tunneled hosts, so it works through either record. --- nix-infra-machine/nodes/node001.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix index 60c1882..9824c58 100644 --- a/nix-infra-machine/nodes/node001.nix +++ b/nix-infra-machine/nodes/node001.nix @@ -19,6 +19,8 @@ let "serpbear.rubenhensen.nl" "git.rubenhensen.nl" "vic.rubenhensen.nl" + # The group's DNS points foto at rubenhensen.nl, i.e. here + "foto.scoutingmbg.nl" ]; sniMapEntries =