Initial commit 🚀

2024-11-02 01:16:28 +00:00
1 parent e55ae1a1f5
commit 5a14609b2d
@@ -0,0 +1,39 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-production
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: "${SECRET_ACME_EMAIL}"
+    privateKeySecretRef:
+      name: letsencrypt-production
+    solvers:
+      - dns01:
+          cloudflare:
+            apiTokenSecretRef:
+              name: cert-manager-secret
+              key: api-token
+        selector:
+          dnsZones:
+            - "${SECRET_DOMAIN}"
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: "${SECRET_ACME_EMAIL}"
+    privateKeySecretRef:
+      name: letsencrypt-staging
+    solvers:
+      - dns01:
+          cloudflare:
+            apiTokenSecretRef:
+              name: cert-manager-secret
+              key: api-token
+        selector:
+          dnsZones:
+            - "${SECRET_DOMAIN}"
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./issuers.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: cert-manager-secret
+stringData:
+    api-token: ENC[AES256_GCM,data:7WkX5RFI4jd2yGuKCNbT1HWWXKIBPrmFSlFSVg6doNU3iiP2B8Vcow==,iv:+4cvG4SvRUN0+fmuwj6ogwTNQ4XRZQi9hz0cRd2BY5Q=,tag:r/Or8fhtg2Kf+w46+RBXsA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlNE5Yd3NReHpGYlZabFVh
+            Z3VLb0ZMaGZPOFM0elpMWjRSM2RHeFFOWXpNCnRDcUhNSVVBQTN2UFQzaWl4WlVT
+            VmxOTmtSc0ZXQWJXZjd3a29uZVNTTTgKLS0tIGV4Q0FhdlprbEhJMkFYdGg2LzFr
+            QmhjOXN3R2ZlTmRUQnNmclF5dnFGUFkKi6VzujVvYDUK1nM7wgoKTUxeBg2nkWb8
+            /r6sbu6RINcjBLPLSCTMcHijwmZZ6BJD3HVyvyOXD6GkuoCf1vjjSg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-02T01:13:55Z"
+    mac: ENC[AES256_GCM,data:H1mdXaZRFgANACqpyJ3g6HULZVSVHTXmiNDz3LRJaCLVHPQ4Xj4mfVfo9V1V/+wiXiH4GOOj2Q2R7jvGP017GAt83PIfM3XkJIlIh844df/JpRj3gDB0ui5aECjbt5Li67j/rw6fsDYjxKtVyC2qjY8bwPKz0x4KwP5pVZW8rD0=,iv:Fqt0DBAW868pWQEsSQiJr+h9UFEzjZD/8YjgC9ZOzXw=,tag:Wr+jgCIpVLCEEXmHiXUqWQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1