# infrastructure/cert-manager/duckdns-issuer.yaml
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: duckdns
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: jij@example.com
    solvers:
    - dns01:
        webhook:
          groupName: acme.zacharysegnbauer.com   # webhook-specifiek — check repo
          solverName: duckdns
          config:
            secretName: duckdns-token
            subdomain: zb-kw
            subdomains: "*"   # of wildcard via token-methode