apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: internal-wildcard-tls
  namespace: streaming
spec:
  secretName: internal-wildcard-tls
  dnsNames:
    - "*.workstation.internal"
    - "*.gigaforust.internal"
    - workstation.internal
    - gigaforust.internal
  issuerRef:
    name: internal-ca
    kind: ClusterIssuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: jelly-prod-tls
  namespace: streaming
spec:
  secretName: jelly-prod-tls
  dnsNames:
    - jelly.forust.xyz
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: seerr-prod-tls
  namespace: streaming
spec:
  secretName: seerr-prod-tls
  dnsNames:
    - seerr.forust.xyz
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
# ---
# apiVersion: cert-manager.io/v1
# kind: Certificate
# metadata:
#   name: qbittorrent-prod-tls
#   namespace: streaming
# spec:
#   secretName: qbittorrent-prod-tls
#   dnsNames:
#     - qbittorrent.forust.xyz
#   issuerRef:
#     name: letsencrypt-prod
#     kind: ClusterIssuer
# ---
# apiVersion: cert-manager.io/v1
# kind: Certificate
# metadata:
#   name: sonarr-prod-tls
#   namespace: streaming
# spec:
#   secretName: sonarr-prod-tls
#   dnsNames:
#     - sonarr.forust.xyz
#   issuerRef:
#     name: letsencrypt-prod
#     kind: ClusterIssuer
# ---
# apiVersion: cert-manager.io/v1
# kind: Certificate
# metadata:
#   name: radarr-prod-tls
#   namespace: streaming
# spec:
#   secretName: radarr-prod-tls
#   dnsNames:
#     - radarr.forust.xyz
#   issuerRef:
#     name: letsencrypt-prod
#     kind: ClusterIssuer
# ---
# apiVersion: cert-manager.io/v1
# kind: Certificate
# metadata:
#   name: prowlarr-prod-tls
#   namespace: streaming
# spec:
#   secretName: prowlarr-prod-tls
#   dnsNames:
#     - prowlarr.forust.xyz
#   issuerRef:
#     name: letsencrypt-prod
#     kind: ClusterIssuer