fix(gotosocial): TLS

JJGadgets · Jul 25, 2024 · 5a0a31a · 5a0a31a
1 parent fe91667
commit 5a0a31a
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/kube/deploy/apps/gotosocial/app/hr.yaml b/kube/deploy/apps/gotosocial/app/hr.yaml
@@ -131,6 +131,7 @@ spec:
                   port: http
         tls:
           - hosts: [*host]
+            secretName: gotosocial-tls
     defaultPodOptions:
       automountServiceAccountToken: false
       enableServiceLinks: false

diff --git a/kube/deploy/apps/gotosocial/app/tls.yaml b/kube/deploy/apps/gotosocial/app/tls.yaml
@@ -0,0 +1,18 @@
+---
+# yaml-language-server: $schema=https://crds.jank.ing/cert-manager.io/certificate_v1.json
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: &app gotosocial
+  namespace: *app
+spec:
+  secretName: gotosocial-tls
+  issuerRef:
+    name: letsencrypt-production
+    kind: ClusterIssuer
+  privateKey:
+    algorithm: ECDSA
+    size: 384
+  commonName: social.jjgadgets.tech
+  dnsNames:
+    - social.jjgadgets.tech