mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-23 12:56:46 +00:00
Scooby HuskyandClaude Sonnet 5
1febd18bd6
GitLab's new Gitaly/workhorse TLS certs are the first thing needing a real Let's Encrypt cert under ha.huskypup.net (the cross-site floating- hostname zone) - everything else there (Postgres) uses CNPG's own self-signed certs, never hit this gap. Confirmed live: DNS-01 order failed with 'no configured challenge solvers can be used for this challenge' until this zone was added to the selector. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
54 lines
1.7 KiB
YAML
54 lines
1.7 KiB
YAML
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-production
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: garrettstone499@gmail.com
|
|
privateKeySecretRef:
|
|
name: letsencrypt-production
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
email: garrettstone499@gmail.com
|
|
apiTokenSecretRef:
|
|
name: cloudflare-token-secret
|
|
key: cloudflare-token
|
|
selector:
|
|
dnsZones:
|
|
- "kube.huskypup.net"
|
|
# GitLab cross-site replication (see
|
|
# /home/scooby/.claude/plans/jiggly-snacking-iverson.md) -
|
|
# first real Let's Encrypt cert needed for anything under
|
|
# ha.huskypup.net (the floating-hostname zone used for
|
|
# cross-site Postgres/Gitaly addressing) - everything
|
|
# before this used CNPG's own self-signed certs, never hit
|
|
# this gap. Confirmed live: DNS-01 order failed with "no
|
|
# configured challenge solvers can be used for this
|
|
# challenge" until this zone was added. Same Cloudflare
|
|
# account/token as kube.huskypup.net.
|
|
- "ha.huskypup.net"
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-staging
|
|
spec:
|
|
acme:
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
email: garrettstone499@gmail.com
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging
|
|
solvers:
|
|
- dns01:
|
|
cloudflare:
|
|
email: garrettstone499@gmail.com
|
|
apiTokenSecretRef:
|
|
name: cloudflare-token-secret
|
|
key: cloudflare-token
|
|
selector:
|
|
dnsZones:
|
|
- "kube.huskypup.net" |