update duckdns issuer

2026-10-12 14:30:14 +02:00
parent 1eab656f01
commit d0b12847d9
2 changed files with 33 additions and 18 deletions
@@ -1,18 +0,0 @@
-# infrastructure/cert-manager/duckdns-issuer.yaml
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: duckdns
-spec:
-  acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
-    email: [email protected]
-    solvers:
-    - dns01:
-        webhook:
-          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
-          solverName: duckdns
-          config:
-            secretName: duckdns-token
-            subdomain: zb-kw
-            subdomains: "*"   # of wildcard via token-methode
@@ -0,0 +1,33 @@
+# infrastructure/cert-manager/duckdns-issuer.yaml
+# apiVersion: cert-manager.io/v1
+# kind: ClusterIssuer
+# metadata:
+#   name: duckdns
+# spec:
+#   acme:
+#     server: https://acme-v02.api.letsencrypt.org/directory
+#     email: [email protected]
+#     privateKeySecretRef:
+#       name: duckdns-account-key        # account-key wordt hierin opgeslagen
+#     solvers:
+#     - dns01:
+#         webhook:
+#           groupName: acme.duckdns.org   # <-- dit is de juiste waarde
+#           solverName: duckdns
+#           config:
+#             apiTokenSecretRef:          # <-- let op: niet secretName/subdomain!
+#               name: duckdns-token
+#               key: token
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: zb-kw-wildcard
+  namespace: argocd
+spec:
+  secretName: zb-kw-wildcard-tls
+  dnsNames:
+  - '*.zb-kw.duckdns.org'
+  issuerRef:
+    name: duckdns
+    kind: ClusterIssuer