mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-16 03:57:37 +00:00
vhaudiquet
ae8a4ddb27
Flux HelmRelease of the saggar hub (chart saggar-hub >=0.2.0-0, CI-published on the gitea saggar org, appVersion pinned to the image commit) with the web UI. Engine on api.saggar.dev for the CLI and the docker/apt registries, UI on saggar.dev — new cert, caddy route and dns A record for the api host, TLS terminating at Caddy as usual. Login via the home Gitea as an OIDC provider; private registry and helm repo auth share one packages token.
114 lines
2.4 KiB
YAML
114 lines
2.4 KiB
YAML
# Certificates managed by cert-manager
|
|
# These will automatically renew before expiry
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: vhaudiquet.fr
|
|
dnsNames:
|
|
- vhaudiquet.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.vhaudiquet.fr"
|
|
dnsNames:
|
|
- "*.vhaudiquet.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: semery.fr
|
|
dnsNames:
|
|
- semery.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.semery.fr"
|
|
dnsNames:
|
|
- "*.semery.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: buildpath-win
|
|
namespace: caddy
|
|
spec:
|
|
secretName: buildpath-win-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: buildpath.win
|
|
dnsNames:
|
|
- buildpath.win
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: saggar.dev
|
|
dnsNames:
|
|
- saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: api-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: api-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: api.saggar.dev
|
|
dnsNames:
|
|
- api.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|