GITGUD

neiam neiam /oh-my-ex-oh-ircd

public · Issues · Pulls · Labels · Forks · Compare · Actions success · Badges · Packages

⭐

Log in to mark this repository.

740 B · text History 4b6fe3b 
# cert-manager will obtain & renew this cert; the Ingress AND the IRC
# TLS listener both consume the resulting `irc-tls` Secret. cert-manager
# updates the Secret in-place on renewal, kubelet refreshes the
# projected volume in the IRC pods, and `:ssl` re-reads the keyfile on
# every new TLS handshake — so rotations propagate automatically.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: irc-tls
  namespace: ircd
spec:
  secretName: irc-tls
  duration: 2160h    # 90d, matches Let's Encrypt
  renewBefore: 360h  # 15d
  issuerRef:
    name: letsencrypt-prod   # ClusterIssuer assumed to exist in the cluster
    kind: ClusterIssuer
  commonName: irc.example.com
  dnsNames:
    - irc.example.com
    - example.com