mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-19 00:56:16 +00:00
The leaf cert generator already routes IP-shaped entries into the IPAddresses SAN, and getDomains already feeds it the hostnames parsed from --server-url and --https-server-url. Add an explicit --tls-extra-host flag (repeatable, env TLS_EXTRA_HOST) for the remaining cases: multi-homed hosts, reverse-proxy frontends, or browsing the admin UI via a LAN IP that isn't part of the configured server URLs. Resolves the ERR_CERT_COMMON_NAME_INVALID Chrome refuses when the URL bar hostname (e.g. the host's LAN IP) isn't in any cert SAN, even when the local CA is trusted.