diff --git a/apps/templates/cert-manager.yaml b/apps/templates/cert-manager.yaml index c07235b..d41acc7 100644 --- a/apps/templates/cert-manager.yaml +++ b/apps/templates/cert-manager.yaml @@ -29,51 +29,51 @@ spec: prune: true selfHeal: true -# --- -# apiVersion: cert-manager.io/v1 -# kind: ClusterIssuer -# metadata: -# name: roxedus.com-cloudflare -# namespace: cert-manager -# spec: -# acme: -# server: https://acme-v02.api.letsencrypt.org/directory -# privateKeySecretRef: -# name: cloudflare-issuer-account-key -# solvers: -# - dns01: -# cloudflare: -# apiTokenSecretRef: -# name: cloudflare-api-token-secret -# key: CLOUDFLARE_API_KEY -# selector: -# dnsNames: -# - 'roxedus.com' -# - '*.roxedus.com' -# --- -# apiVersion: networking.k8s.io/v1 -# kind: Ingress -# metadata: -# annotations: -# # add an annotation indicating the issuer to use. -# cert-manager.io/acme-challenge-type: dns01 -# cert-manager.io/cluster-issuer: roxedus.com-cloudflare -# name: myingress -# namespace: default -# spec: -# ingressClassName: traefik -# rules: -# - host: test.roxedus.com -# http: -# paths: -# - pathType: Prefix -# path: / -# backend: -# service: -# name: searxng -# port: -# number: 8080 -# tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames -# - hosts: -# - test.roxedus.com -# secretName: test-roxedus-com-cert # < cert-manager will store the created certificate in this secret. \ No newline at end of file +--- +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: roxedus.com-cloudflare + namespace: cert-manager +spec: + acme: + server: https://acme-v02.api.letsencrypt.org/directory + privateKeySecretRef: + name: cloudflare-issuer-account-key + solvers: + - dns01: + cloudflare: + apiTokenSecretRef: + name: cloudflare-api-token-secret + key: CLOUDFLARE_API_KEY + selector: + dnsNames: + - 'roxedus.com' + - '*.roxedus.com' +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + annotations: + # add an annotation indicating the issuer to use. + cert-manager.io/acme-challenge-type: dns01 + cert-manager.io/cluster-issuer: roxedus.com-cloudflare + name: testingress + namespace: default +spec: + ingressClassName: traefik + rules: + - host: test.roxedus.com + http: + paths: + - pathType: Prefix + path: / + backend: + service: + name: searxng + port: + number: 8080 + tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames + - hosts: + - test.roxedus.com + secretName: test-roxedus-com-cert # < cert-manager will store the created certificate in this secret. \ No newline at end of file