update duckdns issuer

infrastructure/cert-manager/duckdns-issuer.yaml

@@ -1,18 +1,33 @@
 # infrastructure/cert-manager/duckdns-issuer.yaml
+# apiVersion: cert-manager.io/v1
+# kind: ClusterIssuer
+# metadata:
+#   name: duckdns
+# spec:
+#   acme:
+#     server: https://acme-v02.api.letsencrypt.org/directory
+#     email: [email protected]
+#     privateKeySecretRef:
+#       name: duckdns-account-key        # account-key wordt hierin opgeslagen
+#     solvers:
+#     - dns01:
+#         webhook:
+#           groupName: acme.duckdns.org   # <-- dit is de juiste waarde
+#           solverName: duckdns
+#           config:
+#             apiTokenSecretRef:          # <-- let op: niet secretName/subdomain!
+#               name: duckdns-token
+#               key: token
+
 apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+kind: Certificate
 metadata:
-  name: duckdns
+  name: zb-kw.duckdns.org
+  namespace: services
 spec:
-  acme:
+  dnsNames:
-    server: https://acme-v02.api.letsencrypt.org/directory
+  - 'zb-kw.duckdns.org'
-    email: [email protected]
+  issuerRef:
-    solvers:
+    name: cert-manager-webhook-duckdns-production
-    - dns01:
+    kind: ClusterIssuer
-        webhook:
+  secretName: zb-kw-duckdns-org-tls
-          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
-          solverName: duckdns
-          config:
-            secretName: duckdns-token
-            subdomain: zb-kw
-            subdomains: "*"   # of wildcard via token-methode