apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: gitea-labzand namespace: external spec: secretName: gitea-labzand-tls dnsNames: ["gitea.labzand.com"] issuerRef: name: cloudflare-dns kind: ClusterIssuer