move issuer to configs

infrastructure/controllers/cert-manager/certificate-wildcard-cert-letsencrypt-prod.yaml

@@ -1,20 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: letsencrypt-wildcard-cert-michaelthomson.dev
-  namespace: letsencrypt-wildcard-cert
-spec:
-  # secretName doesn't have to match the certificate name, but it may as well, for simplicity!
-  secretName: letsencrypt-wildcard-cert-michaelthomson.dev
-  secretTemplate:
-    annotations:
-      reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
-      reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces: ""
-      reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true"
-      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: ""
-  issuerRef:
-    name: letsencrypt-prod
-    kind: ClusterIssuer
-  dnsNames:
-    - "michaelthomson.dev"
-    - "*.michaelthomson.dev"

infrastructure/controllers/cert-manager/cluster-issuer-letsencrypt-prod.yaml

@@ -1,20 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-prod
-spec:
-  acme:
-    email: michael@michaelthomson.dev
-    server: https://acme-v02.api.letsencrypt.org/directory
-    privateKeySecretRef:
-      name: letsencrypt-staging
-    solvers:
-    - selector:
-        dnsZones:
-          - "michaelthomson.dev"
-      dns01:
-        cloudflare:
-          email: michael@michaelthomson.dev
-          apiKeySecretRef:
-            name: secret
-            key: cloudflare_api_key

infrastructure/controllers/longhorn/release.yaml

@@ -32,12 +32,4 @@ spec:
       restoreVolumeRecurringJobs: true
 
     ingress:
-      enabled: true
-      ingressClassName: traefik
-      host: longhorn.michaelthomson.dev
-      tls: true
-      secureBackends: true
-      tlsSecret: letsencrypt-wildcard-cert-michaelthomson.dev
-      annotations:
-        traefik.ingress.kubernetes.io/router.tls: "true"
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      enabled: false

infrastructure/controllers/traefik/release.yaml

@@ -19,13 +19,7 @@ spec:
         allowCrossNamespace: true
     ingressRoute:
       dashboard:
-        enabled: true
-        matchRule: Host(`server.michaelthomson.dev`)
-        entryPoints: ["websecure"]
-        tls:
-          secretName: letsencrypt-wildcard-cert-michaelthomson.dev
-          domains:
-            - main: server.michaelthomson.dev
+        enabled: false
     ports:
       websecure:
         transport: