Dan V
deb6c38d7b
- Add .gitignore: exclude compiled binaries, build artifacts, and Helm values files containing real secrets (authentik, prometheus) - Add all Kubernetes deployment manifests (deployment/) - Add services source code: ha-sync, device-inventory, games-console, paperclip, parts-inventory - Add Ansible orchestration: playbooks, roles, inventory, cloud-init - Add hardware specs, execution plans, scripts, HOMELAB.md - Add skills/homelab/SKILL.md + skills/install.sh to preserve Copilot skill - Remove previously-tracked inventory-cli binary from git index Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
41 lines
1.1 KiB
YAML
41 lines
1.1 KiB
YAML
---
|
|
# NOTE: Secret 'digitalocean-dns-token' must be created manually in cert-manager namespace:
|
|
# kubectl create secret generic digitalocean-dns-token \
|
|
# --from-literal=access-token=<YOUR_DO_TOKEN> \
|
|
# -n cert-manager
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
annotations: {}
|
|
name: letsencrypt-prod
|
|
spec:
|
|
acme:
|
|
email: dan.vandachevici@gmail.com
|
|
privateKeySecretRef:
|
|
name: letsencrypt-prod-account-key
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
solvers:
|
|
- dns01:
|
|
digitalocean:
|
|
tokenSecretRef:
|
|
key: access-token
|
|
name: digitalocean-dns-token
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
annotations: {}
|
|
name: letsencrypt-staging
|
|
spec:
|
|
acme:
|
|
email: dan.vandachevici@gmail.com
|
|
privateKeySecretRef:
|
|
name: letsencrypt-staging-account-key
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
solvers:
|
|
- dns01:
|
|
digitalocean:
|
|
tokenSecretRef:
|
|
key: access-token
|
|
name: digitalocean-dns-token
|