mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-19 21:10:35 +00:00
vhaudiquet
9aeecee770
The release runners cannot resolve the in-cluster Service name, so the binary uploads died on DNS. s3.rhema.rs fronts the same Garage through Caddy and Traefik, with its own certificate, matching the web face's shape (Caddy terminates, Traefik routes, bucket by path).
210 lines
4.4 KiB
YAML
210 lines
4.4 KiB
YAML
# Certificates managed by cert-manager
|
|
# These will automatically renew before expiry
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: vhaudiquet.fr
|
|
dnsNames:
|
|
- vhaudiquet.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.vhaudiquet.fr"
|
|
dnsNames:
|
|
- "*.vhaudiquet.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: semery.fr
|
|
dnsNames:
|
|
- semery.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.semery.fr"
|
|
dnsNames:
|
|
- "*.semery.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: buildpath-win
|
|
namespace: caddy
|
|
spec:
|
|
secretName: buildpath-win-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: buildpath.win
|
|
dnsNames:
|
|
- buildpath.win
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: saggar.dev
|
|
dnsNames:
|
|
- saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: api-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: api-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: api.saggar.dev
|
|
dnsNames:
|
|
- api.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: docs-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: docs-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: docs.saggar.dev
|
|
dnsNames:
|
|
- docs.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: get-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: get-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: get.saggar.dev
|
|
dnsNames:
|
|
- get.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: rhema-rs
|
|
namespace: caddy
|
|
spec:
|
|
secretName: rhema-rs-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: rhema.rs
|
|
dnsNames:
|
|
- rhema.rs
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: s3-rhema-rs
|
|
namespace: caddy
|
|
spec:
|
|
secretName: s3-rhema-rs-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: s3.rhema.rs
|
|
dnsNames:
|
|
- s3.rhema.rs
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: www-rhema-rs
|
|
namespace: caddy
|
|
spec:
|
|
secretName: www-rhema-rs-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: www.rhema.rs
|
|
dnsNames:
|
|
- www.rhema.rs
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: get-rhema-rs
|
|
namespace: caddy
|
|
spec:
|
|
secretName: get-rhema-rs-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: get.rhema.rs
|
|
dnsNames:
|
|
- get.rhema.rs
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|