561 B · text History 4b6fe3b
# cert-manager Certificate — both the Ingress (web UI) and the IRC TLS
# listener mount the resulting `ircd-tls` Secret. cert-manager rotates
# in place; kubelet refreshes the projected volume; `:ssl` re-reads the
# files on every new handshake.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ircd-tls
  namespace: neiam-ircd
spec:
  secretName: ircd-tls
  duration: 2160h    # 90d
  renewBefore: 360h  # 15d
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  commonName: irc.skyjeep.club
  dnsNames:
    - irc.skyjeep.club