move issuer to configs

This commit is contained in:
2025-12-18 06:12:31 -05:00
parent 8f4c2dc1b3
commit f1d0cbeedd
5 changed files with 28 additions and 17 deletions

View File

@@ -7,7 +7,7 @@ spec:
email: michael@michaelthomson.dev
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-staging
name: letsencrypt-prod
solvers:
- selector:
dnsZones:

View File

@@ -0,0 +1,25 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: longhorn
namespace: longhorn-system
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
rules:
- host: longhorn.michaelthomson.dev
http:
paths:
- backend:
service:
name: longhorn-frontend
port:
number: 80
path: /
pathType: ImplementationSpecific
tls:
- hosts:
- longhorn.michaelthomson.dev
secretName: longhorn-tls

View File

@@ -32,12 +32,4 @@ spec:
restoreVolumeRecurringJobs: true
ingress:
enabled: true
ingressClassName: traefik
host: longhorn.michaelthomson.dev
tls: true
secureBackends: true
tlsSecret: letsencrypt-wildcard-cert-michaelthomson.dev
annotations:
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
enabled: false

View File

@@ -19,13 +19,7 @@ spec:
allowCrossNamespace: true
ingressRoute:
dashboard:
enabled: true
matchRule: Host(`server.michaelthomson.dev`)
entryPoints: ["websecure"]
tls:
secretName: letsencrypt-wildcard-cert-michaelthomson.dev
domains:
- main: server.michaelthomson.dev
enabled: false
ports:
websecure:
transport: