feat: move argocd/authentik to *.labzand.com with Cloudflare DNS-01 wildcard certs

Internal-only hostnames (argocd.labzand.com, auth.labzand.com) via AdGuard wildcard rewrite; certs still valid via DNS-01 so no browser warnings. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-06 20:37:30 +01:00
parent f585fa0aa9
commit 264815b2d2
4 changed files with 27 additions and 10 deletions
@@ -9,7 +9,7 @@ metadata:
 spec:
  ingressClassName: traefik
  rules:
-  - host: auth.zb-kw.duckdns.org
+  - host: auth.labzand.com
    http:
      paths:
      - path: /
@@ -21,5 +21,5 @@ spec:
              number: 9000
  tls:
  - hosts:
-    - auth.zb-kw.duckdns.org
-    secretName: zb-kw-wildcard-tls
+    - auth.labzand.com
+    secretName: labzand-wildcard-tls