# Let's Encrypt ClusterIssuer
# Supports multiple DNS providers via DNS-01 challenge

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-production
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: vhaudiquet343@hotmail.fr
    privateKeySecretRef:
      name: letsencrypt-production-account-key
    solvers:
      # Cloudflare solver for vhaudiquet.fr and buildpath.win
      - dns01:
          cloudflare:
            apiTokenSecretRef:
              name: cloudflare-api-token
              key: api-token
        selector:
          dnsZones:
            - vhaudiquet.fr
            - buildpath.win
      # OVH solver for semery.fr (via cert-manager-webhook-ovh)
      - dns01:
          webhook:
            groupName: acme.aureq.com
            solverName: ovh
            config:
              endpoint: ovh-eu
              authenticationMethod: application
              applicationKeyRef:
                name: ovh-credentials
                key: applicationKey
              applicationSecretRef:
                name: ovh-credentials
                key: applicationSecret
              applicationConsumerKeyRef:
                name: ovh-credentials
                key: consumerKey
        selector:
          dnsZones:
            - semery.fr