From 9aa6298df4c702b3bd73ac67149e2360358e8ff9 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sun, 12 Mar 2023 03:53:42 +0000
Subject: [PATCH] ssh-ca: also sign for otter-acoustic.ts.net

---
 ops/nixos/lib/secretsmgr.nix | 1 +
 ops/vault/cfg/servers.nix    | 1 +
 2 files changed, 2 insertions(+)

diff --git a/ops/nixos/lib/secretsmgr.nix b/ops/nixos/lib/secretsmgr.nix
index 00fd19ab02..9818f89a1e 100644
--- a/ops/nixos/lib/secretsmgr.nix
+++ b/ops/nixos/lib/secretsmgr.nix
@@ -70,6 +70,7 @@ in
       default = let inherit (config.networking) hostName; in [
         "${hostName}.as205479.net"
         "${hostName}.int.as205479.net"
+        "${hostName}.otter-acoustic.ts.net"
       ];
     };
     sshCertificates.role = mkOption {
diff --git a/ops/vault/cfg/servers.nix b/ops/vault/cfg/servers.nix
index bb2d12e3fe..82e07bf3d7 100644
--- a/ops/vault/cfg/servers.nix
+++ b/ops/vault/cfg/servers.nix
@@ -46,6 +46,7 @@ let
           "${name}.as205479.net"
           "${name}.blade.as205479.net"
           "${name}.int.as205479.net"
+          "${name}.otter-acoustic.ts.net"
         ];
       };