feat: move argocd/authentik to *.labzand.com with Cloudflare DNS-01 wildcard certs

Internal-only hostnames (argocd.labzand.com, auth.labzand.com) via AdGuard wildcard rewrite; certs still valid via DNS-01 so no browser warnings. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-06 20:37:30 +01:00
parent f585fa0aa9
commit 264815b2d2
4 changed files with 27 additions and 10 deletions
@@ -0,0 +1,13 @@
+# Wildcard-certificaat voor *.labzand.com via Cloudflare DNS-01.
+# DNS-01 werkt ook voor hostnames die niet publiek bereikbaar zijn.
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: labzand-wildcard
+  namespace: argocd
+spec:
+  secretName: labzand-wildcard-tls
+  dnsNames: ["*.labzand.com"]
+  issuerRef:
+    name: cloudflare-dns
+    kind: ClusterIssuer