forust
bc1e69ebe0
ci / lint-prettier (push) Successful in 2s
ci / lint-ruff (push) Successful in 0s
ci / lint-yaml (push) Successful in 2s
ci / lint-dockerfiles (push) Successful in 1s
ci / validate (push) Successful in 1s
ci / build (push) Skipped
ci / deploy-userbot-panel (push) Skipped
Selfsigned root (10y) + internal-ca issuer; per-namespace internal-wildcard-tls certs referenced by all -local routers. Root public cert committed for client trust stores.
34 lines
657 B
YAML
34 lines
657 B
YAML
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: selfsigned
|
|
spec:
|
|
selfSigned: {}
|
|
---
|
|
# Homelab internal root CA (10y). Install the .crt on clients (see below).
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: internal-ca-root
|
|
namespace: cert-manager
|
|
spec:
|
|
isCA: true
|
|
commonName: homelab internal root CA
|
|
duration: 87600h
|
|
renewBefore: 7200h
|
|
secretName: internal-ca-root
|
|
privateKey:
|
|
algorithm: RSA
|
|
size: 4096
|
|
issuerRef:
|
|
name: selfsigned
|
|
kind: ClusterIssuer
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: internal-ca
|
|
spec:
|
|
ca:
|
|
secretName: internal-ca-root
|