From 8f4c2dc1b34943c339f0a6f6073a70cc7c1c8067 Mon Sep 17 00:00:00 2001
From: Michael Thomson <michael@michaelthomson.dev>
Date: Thu, 18 Dec 2025 05:34:06 -0500
Subject: [PATCH] try ingress-generated certs

---
 apps/actual/ingress.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/apps/actual/ingress.yaml b/apps/actual/ingress.yaml
index 81c6d7a..42aa8a7 100644
--- a/apps/actual/ingress.yaml
+++ b/apps/actual/ingress.yaml
@@ -4,6 +4,7 @@ metadata:
   name: actual
   namespace: actual
   annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
     external-dns.alpha.kubernetes.io/target: michaelthomson.ddns.net
     external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
@@ -21,6 +22,6 @@ spec:
             port: 
               name: http
   tls:
-    - hosts:
-        - actual.michaelthomson.dev
-      secretName: letsencrypt-wildcard-cert-michaelthomson.dev
+  - hosts:
+    - actual.michaelthomson.dev
+    secretName: actual-tls