cert-manager-issuers

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:W5EyfACtGs9eoWsTiPFuWHKYgsafjW7RB5UnrWx08HiNosxUvnjj9nwuNH4FCTQvEH0ozH1MkrcB,iv:E3JPmxdtypvICkklLUlwJaGuEHNIZg1WH2TMLgmYhjU=,tag:qosaGqzTKy82W4+PoY7P4Q==,type:comment]
+    #ENC[AES256_GCM,data:k/BGGUN1tN7g4ljzMA9YOk2NyXzOhH9zqPrI1LuZof6bANpAoYUtFShs8vzN7akwySaWOsT/JCpG,iv:rDwKpQZiJUBMKJ1j7rcPk6oBFgrmRHUcPUcGZ4UpqDc=,tag:0vXY3/UnzQZKwk93Y5K6lQ==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:2B4IxwEPF7iQOo837uQ0ZKiPwp3ZufXUiQ2IO5j5S1yRBWQo+SFj4lS1l89/VFEmS7NdHQcvlabOgnzaL2LshKx0cQVAlHk9OUALnjJFhD73rmditlUWDK+xnAnCZ4j3E9p5rCPYqQCbox86Yn+5i6UccE/29A==,iv:02FH5ioq16ZQ7inigTCvP0h3WmqFcHK1HswRkdovGlI=,tag:IGRmkwCPFA+rqfx0LseLiQ==,type:str]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:fg2N86KymW8eq9zcXBQoVwkg8xjAy2X4JEW7RrEfota4RroiXuGOltY19+H9ev2Q7Fyg0qADnLgexF3tLQ1Gd1AuFMOPSr5PuipgLTO4kyd0KFK/pyAWirtFMKDBUIx1E+YqYRwQyZT310msQeBDbT5QxugKJQ==,iv:s7gEsqxp187M9g27qrqSt1YxpL5IFUU+iH7O5GLjgP8=,tag:RpXseIGqe5yMFAmKpKIpDw==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwZmxkbTFHTEo2MnVlTFVh
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqdEZQQXdWNzhmTW1odExm
-            QkVabkRQQncvUVg2TUlCMnZxVlFVUVpaVnprCkZEckR6d2Fua2dMbHQwUlQzUSs2
+            NDJPUFlvVWxDWVNaUk0rcm82b3lZUTZRNkcwCitmYlpGUGpqMG8zUDdJUWlHeFpJ
-            bWRJa2R0U2xEZXBRNGNlTWlTUEdudncKLS0tIHdTY3IxVWpySWN5RExiTGlEVEd5
+            Q3dGQm1CMXlrdjFvMjRMTzBDWDdIeG8KLS0tIGFjODJiNm5WZlJ6ODVjS2JYZVpW
-            NGNyWVo1dkxMaGplaUppcUZDOTNTY2MKegiSllUBePt+4lzL15AEJ1NMj9VmvH+9
+            b0lCbWt0M0laRndTbDhiM1V0ZWY0eVUKeWOxbcYuYbi8Le/+iZGOEwNNIrzFENfp
-            EuWICGehLYcBw7SNftpPmJhrNK/HAYdLV+SPg6Qfzwh9cZtYp0Y1Ww==
+            bVSP7YIYrellC1a6XwTSke86fx45smRir6vJq7yQdoRhavLfgDFamg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:17:30Z"
+    lastmodified: "2026-08-26T10:17:32Z"
-    mac: ENC[AES256_GCM,data:nmPeyQbJexYyrIdx7htBXR8t2K7VEY4q2nqCRaYMz6OAg4L+7kkyFBPB2mYZ7w4FLJJoTGtFrtC0RSNCdKm7inUOaQjgCbJNoY6BD9xuOj5gJQ6DwliwOz7m1NjBwMt9jNFgXAw5jhX3l5GYBbbnE9htji0xOnWvVGKQ8/dNsGM=,iv:tWMYlI4n7gT19LGck+Y//xCCrCd18LSIUQTyi0ghb6E=,tag:7H5uTGClqDuTuVqmR7onXw==,type:str]
+    mac: ENC[AES256_GCM,data:PmOCWfMICuBoX3joX/l1IFXzHEjDjB0K5qabv9SQwXjzk4Tv98w+8o3uQLEda6Z0396+XPIzkSQpiENWOLbZADt9NKN1To1R0Mu26Pf6GI+mgpiMjxXAdHthzUNUZUfiZak1py7vbQUzwcPt6onysKHDtKpW5RzsES6plQUUxJU=,iv:fO93ewwN3u7+39IKLQPfvKvjbNiVDbyJoOyidOBQ4JU=,tag:jlB5M70mWMV7PF2Av4w9qg==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra-apps/cert-manager-issuers/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - letsencrypt-prod.yaml

clusters/base/infra-apps/cert-manager-issuers/letsencrypt-prod.yaml

@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    # server: https://acme-v02.api.letsencrypt.org/directory
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    email: admin@aggtaa.com
+    privateKeySecretRef:
+      name: letsencrypt-prod-account-key
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: traefik
+            

clusters/home/apps.yaml

@@ -4,10 +4,13 @@ metadata:
   name: apps
   namespace: flux-system
 spec:
-  interval: 10m
+  interval: 1m
   sourceRef:
     kind: GitRepository
     name: flux-system
   path: ./clusters/home/apps
   prune: true
   wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra-apps

clusters/home/infra-apps.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-apps
+  namespace: flux-system
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/home/infra-apps
+  prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra

clusters/home/infra-apps/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base/infra-apps/cert-manager-issuers

clusters/home/infra.yaml

@@ -1,12 +1,15 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: infrastructure
+  name: infra
   namespace: flux-system
 spec:
   interval: 1m
   sourceRef:
     kind: GitRepository
     name: flux-system
-  path: ./clusters/home/infrastructure
+  path: ./clusters/home/infra
   prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces

clusters/home/infra/kustomization.yaml

@@ -0,0 +1,3 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: []

clusters/home/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 resources:
   - flux-system
   - namespaces.yaml
-  # - infra.yaml
+  - infra.yaml
   # - infra-nodes.yaml
-  # - infra-apps.yaml
+  - infra-apps.yaml
   - apps.yaml