working on kubernetes with tls and tailscale

kubernetes/cloudflare-issuer/issuer.yml

@@ -1,8 +1,8 @@
 # issuer.yml
 apiVersion: cert-manager.io/v1
-kind: Issuer
+kind: ClusterIssuer # global across namespaces
 metadata:
-  name: ca-issuer
+  name: cloudflare-issuer
 spec:
   acme:
     email: alexmickelson96@gmail.com

kubernetes/cloudflare-issuer/readme.md

@@ -15,7 +15,7 @@ helm install \
 <https://medium.com/@kevinlutzer9/managed-ssl-certs-for-a-private-kubernetes-cluster-with-cloudflare-cert-manager-and-lets-encrypt-7987ba19044f>
 
 ```bash
-kubectl create secret generic cloudflare-api-key-secret --from-literal=api-key=<TOKEN>
+kubectl create -n cert-manager secret generic cloudflare-api-key-secret --from-literal=api-key=<TOKEN>
 ```
 
 

kubernetes/gitea/web.yml

@@ -78,18 +78,21 @@ kind: Ingress
 metadata:
   name: gitea
   namespace: projects
+  annotations:
+    cert-manager.io/cluster-issuer: cloudflare-issuer
 spec:
   ingressClassName: tailscale
   tls:
   - hosts: 
-    - gitea
+    - gitea.alexmickelson.guru
+    secretName: gitea-tls-cert
   rules:
     - http:
         paths:
-          - path: /
+        - path: /
-            pathType: Prefix
+          pathType: Prefix
-            backend:
+          backend:
-              service:
+            service:
-                name: gitea-web-svc
+              name: gitea-web-svc
-                port:
+              port:
-                  number: 3000
+                number: 3000

nix/home-manager/desktop.home.nix

@@ -10,6 +10,7 @@
     # fira-code
     (nerdfonts.override { fonts = [ "FiraCode" "DroidSansMono" ]; })
     kubernetes-helm
+    busybox
   ];
   fonts.fontconfig.enable = true;
   dconf.enable = true;