feat: remove wildcard cert and default cert for traefik - causing too many problems

cluster/apps/default/hajimari/helm-release.yaml

@@ -113,7 +113,7 @@ spec:
         tls:
           - hosts:
               - "hajimari.${SECRET_DOMAIN}"
-            secretName: hajimari
+            secretName: "hajimari-${SECRET_DOMAIN/./-}-tls"
     persistence:
       data:
         enabled: true

cluster/apps/networking/kustomization.yaml

@@ -2,4 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - traefik
-  - wildcard-certificate

cluster/apps/networking/traefik/dashboard/ingress.yaml

@@ -14,7 +14,7 @@ spec:
   tls:
     - hosts:
         - "traefik.${SECRET_DOMAIN}"
-      secretName: "${SECRET_DOMAIN/./-}-tls"
+      secretName: "traefik-dashboard-${SECRET_DOMAIN/./-}-tls"
   rules:
     - host: "traefik.${SECRET_DOMAIN}"
       http:

cluster/apps/networking/traefik/kustomization.yaml

@@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - helm-release.yaml
-  - tls-store
   - dashboard

cluster/apps/networking/traefik/tls-store/default.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: traefik.containo.us/v1alpha1
-kind: TLSStore
-metadata:
-  name: default
-  namespace: networking
-spec:
-  defaultCertificate:
-    secretName: "${SECRET_DOMAIN/./-}-tls"

cluster/apps/networking/traefik/tls-store/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - default.yaml

cluster/apps/networking/wildcard-certificate/certificate.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: "${SECRET_DOMAIN/./-}"
-  namespace: networking
-spec:
-  secretName: "${SECRET_DOMAIN/./-}-tls"
-  issuerRef:
-    name: letsencrypt-production
-    kind: ClusterIssuer
-  commonName: "${SECRET_DOMAIN}"
-  dnsNames:
-    - "${SECRET_DOMAIN}"
-    - "*.${SECRET_DOMAIN}"

cluster/apps/networking/wildcard-certificate/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - certificate.yaml

cluster/core/cert-manager/helm-release.yaml

@@ -20,12 +20,11 @@ spec:
     webhook:
       enabled: true
     extraArgs:
-      - --dns01-recursive-nameservers=1.1.1.1:53
+      - --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53
       - --dns01-recursive-nameservers-only
-    cainjector:
+    replicaCount: 1
-      replicaCount: 1
     podDnsPolicy: "None"
     podDnsConfig:
       nameservers:
         - "1.1.1.1"
-        - "8.8.8.8"
+        - "9.9.9.9"

cluster/core/cert-manager/letsencrypt-production.yaml

@@ -16,3 +16,6 @@ spec:
             apiTokenSecretRef:
               name: cloudflare-token-secret
               key: cloudflare-token
+        selector:
+          dnsZones:
+            - ${SECRET_DOMAIN}

cluster/core/cert-manager/letsencrypt-staging.yaml

@@ -16,3 +16,6 @@ spec:
             apiTokenSecretRef:
               name: cloudflare-token-secret
               key: cloudflare-token
+        selector:
+          dnsZones:
+            - ${SECRET_DOMAIN}