From 8e60f6796aff83f0a6cc9821eae255d98db71f50 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Tue, 21 Jul 2026 15:29:49 +0200
Subject: [PATCH] node001: tunnel vic.rubenhensen.nl to the home cluster

Add vic.rubenhensen.nl to tunneledHosts so the edge box does SNI
passthrough on :443 and the :80 ACME/redirect vhost for it, matching
the DNS record. Without this, vic falls through to Stalwart on :8443
and cert-manager's HTTP-01 challenge can't be reached.
---
 nix-infra-machine/nodes/node001.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix
index bd2c082..6ac7511 100644
--- a/nix-infra-machine/nodes/node001.nix
+++ b/nix-infra-machine/nodes/node001.nix
@@ -20,6 +20,7 @@ let
     "blog.rubenhensen.nl"
     "serpbear.rubenhensen.nl"
     "git.rubenhensen.nl"
+    "vic.rubenhensen.nl"
   ];
 
   sniMapEntries =