refactor certificates to be per namespace/app

apps/arr/certificate.yaml

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-jpcit-coza
+  namespace: media
+spec:
+  secretName: wildcard-jpcit-coza-tls
+  issuerRef:
+    name: letsencrypt-dns
+    kind: ClusterIssuer
+  commonName: "*.jpcit.co.za"
+  dnsNames:
+    - "*.jpcit.co.za"

apps/arr/jellyfin/ingress.yaml

@@ -18,8 +18,8 @@ spec:
                   number: 80
   tls:
    - hosts:
-      - radarr.jpcit.co.za
-     secretName: widlcard-jethrocotton-com-tls
+      - jellyfin.jethrocotton.com
+      secretName: wildcard-jethrocotton-com-tls
 
 #    - match: Host(`movies.merox.cloud`) # change to your domain
 #      kind: Rule

apps/arr/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 resources:
   - media-namespace.yaml
   - arr-configmap.yaml
+- certificate.yaml
   #- homarr
   - jellyfin
   - mediapvs

apps/arr/prowlarr/ingress.yaml

@@ -18,6 +18,6 @@ spec:
                   number: 80
   tls:
    - hosts:
-      - radarr.jpcit.co.za
-     secretName: widlcard-jethrocotton-com-tls
+      - prowlarr.jpcit.co.za
+      secretName: wildcard-jpcit-coza-tls
 

apps/arr/qbittorrent/ingress.yaml

@@ -18,6 +18,6 @@ spec:
                   number: 80
   tls:
    - hosts:
-      - radarr.jpcit.co.za
-     secretName: widlcard-jpcit-coza-tls
+      - qbittorrent.jpcit.co.za
+      secretName: wildcard-jpcit-coza-tls
 

apps/arr/radarr/ingress.yaml

@@ -19,4 +19,4 @@ spec:
   tls:
    - hosts:
       - radarr.jpcit.co.za
-     secretName: widlcard-jpcit-coza-tls
+      secretName: wildcard-jpcit-coza-tls

apps/arr/sonarr/ingress.yaml

@@ -18,5 +18,5 @@ spec:
                   number: 80
   tls:
    - hosts:
-      - radarr.jpcit.co.za
-     secretName: widlcard-jpcit-coza-tls
+      - sonarr.jpcit.co.za
+      secretName: wildcard-jpcit-coza-tls

apps/forgejo/certificate.yaml

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-jethrocotton-com
+  namespace: forgejo
+spec:
+  secretName: wildcard-jethrocotton-com-tls
+  issuerRef:
+    name: letsencrypt-dns
+    kind: ClusterIssuer
+  commonName: "*.jethrocotton.com"
+  dnsNames:
+    - "*.jethrocotton.com"

apps/forgejo/kustomization.yaml

@@ -7,3 +7,4 @@ resources:
 - ingress.yaml
 - pvc.yaml
 - sshingress.yaml
+- certificate.yaml

apps/kimai/certificate.yaml

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-numbergoup-coza
+  namespace: kimai
+spec:
+  secretName: wildcard-numbergoup-coza-tls
+  issuerRef:
+    name: letsencrypt-dns
+    kind: ClusterIssuer
+  commonName: "*.numbergoup.co.za"
+  dnsNames:
+    - "*.numbergoup.co.za"

apps/kimai/kustomization.yaml

@@ -4,6 +4,7 @@ resources:
 - helmrelease.yaml
 - db
 - kimaisecrets.yaml
+- certificate.yaml
 
 namespace: kimai
 

infrastructure/pgadmin/helmrelease.yaml

@@ -0,0 +1,17 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: pgadmin4
+  namespace: pgadmin
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: pgadmin4
+      version: "*"
+      sourceRef:
+        kind: HelmRepository
+        name: external-secrets
+        namespace: flux-system
+  install:
+    createNamespace: true

infrastructure/pgadmin/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- helmrelease.yaml

infrastructure/sources/kustomization.yaml

@@ -10,3 +10,4 @@ resources:
 - cloudnative-pg.yaml
 - mariadb-operator.yaml
 - smb-driver.yaml
+- runix.yaml

infrastructure/sources/runix.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: pgadmin4
+  namespace: flux-system
+spec:
+  interval: 12h
+  url: https://helm.runix.net