diff --git a/kubernetes/apps/production/arr/jellyseerr/helmrelease.yaml b/kubernetes/apps/production/arr/jellyseerr/helmrelease.yaml index e5f03a3..c1ced8d 100644 --- a/kubernetes/apps/production/arr/jellyseerr/helmrelease.yaml +++ b/kubernetes/apps/production/arr/jellyseerr/helmrelease.yaml @@ -80,10 +80,10 @@ spec: resources: requests: - cpu: 50m - memory: 150Mi + cpu: 20m + memory: 50Mi limits: - memory: 512Mi + memory: 128Mi service: app: @@ -98,7 +98,7 @@ spec: enabled: true className: nginx hosts: - - host: "request.${LOCAL_DOMAIN}" + - host: "request.${PUBLIC_DOMAIN}" paths: - path: / pathType: Prefix @@ -107,5 +107,5 @@ spec: port: http tls: - hosts: - - "request.${LOCAL_DOMAIN}" - secretName: local-mafyuh-dev-production-tls + - "request.${PUBLIC_DOMAIN}" + secretName: mafyuh-dev-production-tls diff --git a/kubernetes/apps/production/cert-manager/certificates/public.yaml b/kubernetes/apps/production/cert-manager/certificates/public.yaml new file mode 100644 index 0000000..255c5d1 --- /dev/null +++ b/kubernetes/apps/production/cert-manager/certificates/public.yaml @@ -0,0 +1,18 @@ +--- +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: mafyuh-dev + namespace: cert-manager +spec: + secretName: mafyuh-dev-production-tls + secretTemplate: + annotations: + reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true" + reflector.v1.k8s.emberstack.com/reflection-allowed: "true" + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "*.mafyuh.dev" + dnsNames: + - "*.mafyuh.dev" \ No newline at end of file diff --git a/kubernetes/apps/production/cert-manager/issuers/letsencrypt.yaml b/kubernetes/apps/production/cert-manager/issuers/letsencrypt.yaml index 3ea59d9..8bc66e6 100644 --- a/kubernetes/apps/production/cert-manager/issuers/letsencrypt.yaml +++ b/kubernetes/apps/production/cert-manager/issuers/letsencrypt.yaml @@ -18,3 +18,4 @@ spec: selector: dnsZones: - local.mafyuh.dev + - mafyuh.dev