mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-15 19:56:15 +00:00
vhaudiquet
50d992b727
- cert-manager-webhook-porkbun via Flux (chart 2.0.7, octabits fork) - porkbun DNS-01 solver on letsencrypt-production for saggar.dev - porkbun API credentials secret (sops) - saggar.dev apex Certificate + Caddy site block -> traefik
98 lines
2.1 KiB
YAML
98 lines
2.1 KiB
YAML
# Certificates managed by cert-manager
|
|
# These will automatically renew before expiry
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: vhaudiquet.fr
|
|
dnsNames:
|
|
- vhaudiquet.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.vhaudiquet.fr"
|
|
dnsNames:
|
|
- "*.vhaudiquet.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: semery.fr
|
|
dnsNames:
|
|
- semery.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.semery.fr"
|
|
dnsNames:
|
|
- "*.semery.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: buildpath-win
|
|
namespace: caddy
|
|
spec:
|
|
secretName: buildpath-win-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: buildpath.win
|
|
dnsNames:
|
|
- buildpath.win
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: saggar.dev
|
|
dnsNames:
|
|
- saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|