fix: rename bootstrap_acme_enable_production_certs var

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/templates/kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml.j2

@@ -61,7 +61,7 @@ spec:
           namespaceSelector:
             any: true
       extraArgs:
-        {% if bootstrap_acme_enable_production_certs | default(false) %}
+        {% if bootstrap_acme_production_enabled | default(false) %}
         default-ssl-certificate: "networking/${SECRET_DOMAIN/./-}-production-tls"
         {% else %}
         default-ssl-certificate: "networking/${SECRET_DOMAIN/./-}-staging-tls"

bootstrap/templates/kubernetes/apps/networking/ingress-nginx/certificates/kustomization.yaml.j2

@@ -4,6 +4,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./staging.yaml
-  {% if bootstrap_acme_enable_production_certs | default(false) %}
+  {% if bootstrap_acme_production_enabled | default(false) %}
   - ./production.yaml
   {% endif %}

bootstrap/vars/config.sample.yaml

@@ -13,12 +13,12 @@ bootstrap_age_public_key:
 bootstrap_timezone: Etc/UTC
 # Email you want to be associated with the ACME account (used for TLS certificates via letsencrypt.org)
 bootstrap_acme_email:
-# Use ACME production servers when requesting the wildcard certificate
-# The default here is `false` which means ACME staging certs will be used instead
+# Use the ACME production env when requesting the wildcard certificate,
+# the default here is `false` which means ACME staging env will be used instead.
 # This is to prevent being rate-limited. Update this option to `true` when you
 # have verified the staging certificate works and then re-run `task configure`
 # and push your changes to Github.
-bootstrap_acme_enable_production_certs: false
+bootstrap_acme_production_enabled: false
 
 # Flux github webhook token (openssl rand -hex 12)
 bootstrap_flux_github_webhook_token: