From f8e9d32a8bb023cda1b8ee886f2949dcf1b770cf Mon Sep 17 00:00:00 2001
From: Sienna Meridian Satterwhite <sienna@sunbeam.pt>
Date: Wed, 25 Mar 2026 13:24:38 +0000
Subject: [PATCH] feat(ingress): add bare domain sunbeam.pt to TLS cert SANs

Element X resolves .well-known from the server_name (sunbeam.pt),
not the homeserver URL. The bare domain needs a valid cert.
---
 overlays/production/cert-manager.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/overlays/production/cert-manager.yaml b/overlays/production/cert-manager.yaml
index 02bd2df..71835bb 100644
--- a/overlays/production/cert-manager.yaml
+++ b/overlays/production/cert-manager.yaml
@@ -54,6 +54,7 @@ spec:
     name: letsencrypt-production
     kind: ClusterIssuer
   dnsNames:
+    - DOMAIN_SUFFIX
     - docs.DOMAIN_SUFFIX
     - meet.DOMAIN_SUFFIX
     - drive.DOMAIN_SUFFIX