mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-10-15 19:56:15 +00:00
vhaudiquet
b8879b2025
The chart's docs book (static nginx) was up in-cluster only: give its ingress a host, with the same edge path as the api host — dns A record, cert-manager certificate and caddy route.
130 lines
2.8 KiB
YAML
130 lines
2.8 KiB
YAML
# Certificates managed by cert-manager
|
|
# These will automatically renew before expiry
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: vhaudiquet.fr
|
|
dnsNames:
|
|
- vhaudiquet.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-vhaudiquet-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-vhaudiquet-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.vhaudiquet.fr"
|
|
dnsNames:
|
|
- "*.vhaudiquet.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: semery.fr
|
|
dnsNames:
|
|
- semery.fr
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: wildcard-semery-fr
|
|
namespace: caddy
|
|
spec:
|
|
secretName: wildcard-semery-fr-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: "*.semery.fr"
|
|
dnsNames:
|
|
- "*.semery.fr"
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: buildpath-win
|
|
namespace: caddy
|
|
spec:
|
|
secretName: buildpath-win-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: buildpath.win
|
|
dnsNames:
|
|
- buildpath.win
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: saggar.dev
|
|
dnsNames:
|
|
- saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: api-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: api-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: api.saggar.dev
|
|
dnsNames:
|
|
- api.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: docs-saggar-dev
|
|
namespace: caddy
|
|
spec:
|
|
secretName: docs-saggar-dev-tls
|
|
issuerRef:
|
|
name: letsencrypt-production
|
|
kind: ClusterIssuer
|
|
commonName: docs.saggar.dev
|
|
dnsNames:
|
|
- docs.saggar.dev
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days before expiry
|