mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-15 19:56:15 +00:00
vhaudiquet
50d992b727
- cert-manager-webhook-porkbun via Flux (chart 2.0.7, octabits fork) - porkbun DNS-01 solver on letsencrypt-production for saggar.dev - porkbun API credentials secret (sops) - saggar.dev apex Certificate + Caddy site block -> traefik
60 lines
1.7 KiB
YAML
60 lines
1.7 KiB
YAML
# Let's Encrypt ClusterIssuer
|
|
# Supports multiple DNS providers via DNS-01 challenge
|
|
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-production
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: vhaudiquet343@hotmail.fr
|
|
privateKeySecretRef:
|
|
name: letsencrypt-production-account-key
|
|
solvers:
|
|
# Cloudflare solver for vhaudiquet.fr and buildpath.win
|
|
- dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: api-token
|
|
selector:
|
|
dnsZones:
|
|
- vhaudiquet.fr
|
|
- buildpath.win
|
|
# OVH solver for semery.fr (via cert-manager-webhook-ovh)
|
|
- dns01:
|
|
webhook:
|
|
groupName: acme.aureq.com
|
|
solverName: ovh
|
|
config:
|
|
endpoint: ovh-eu
|
|
authenticationMethod: application
|
|
applicationKeyRef:
|
|
name: ovh-credentials
|
|
key: applicationKey
|
|
applicationSecretRef:
|
|
name: ovh-credentials
|
|
key: applicationSecret
|
|
applicationConsumerKeyRef:
|
|
name: ovh-credentials
|
|
key: consumerKey
|
|
selector:
|
|
dnsZones:
|
|
- semery.fr
|
|
# Porkbun solver for saggar.dev (via cert-manager-webhook-porkbun)
|
|
- dns01:
|
|
webhook:
|
|
groupName: acme.saggar.dev
|
|
solverName: porkbun
|
|
config:
|
|
apiKey:
|
|
name: porkbun-api-credentials
|
|
key: api-key
|
|
secretApiKey:
|
|
name: porkbun-api-credentials
|
|
key: secret-key
|
|
selector:
|
|
dnsZones:
|
|
- saggar.dev
|