Https instead of dns challenge

gitops-kaisers-info/templates/cert-manager.yaml

@@ -21,38 +21,48 @@ spec:
     helm:
       releaseName: cert-manager
 ---
-apiVersion: argoproj.io/v1alpha1
-kind: Application
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
 metadata:
-  name: cert-manager-hetzner-webhook
-  namespace: {{ .Values.spec.namespace }}
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
+  name: letsencrypt-staging
+  namespace: cert-manager
 spec:
-  destination:
-    namespace: cert-manager
-    name: {{ .Values.spec.destination.name }}
-  project: {{ .Values.spec.project }}
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-  source:
-    chart: cert-manager-webhook-hetzner
-    repoURL: https://deyaeddin.github.io/cert-manager-webhook-hetzner/chart/
-    targetRevision: 0.2.1
-    helm:
-      releaseName: cert-manager-hetzner-webhook
-      parameters:
-      - name: "groupName"
-        value: "acme.kaisers.info"
-      - name: "certManager.namespace"
-        value: {{ .Values.spec.namespace }}
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "staging-issuer-account-key"
+    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"
+                  traefik.ingress.kubernetes.io/router.tls: "true"
+                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
+                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
 ---
-apiVersion: v1
-kind: Secret
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
 metadata:
-  name: hetzner-secret
-type: Opaque
-data:
-  api-key: M21TS3N1bzAzTVNld1JQeW12aVFpSU5TbFhPc0lBOFU=
+  name: letsencrypt-prod
+  namespace: cert-manager
+spec:
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "prod-issuer-account-key"
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"
+                  traefik.ingress.kubernetes.io/router.tls: "true"
+                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
+                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

gitops-kaisers-info/templates/letsencrypt.yaml

@@ -1,45 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-staging
-  namespace: cert-manager
-spec:
-  acme:
-    email: "admin@kaisers.info" # replace this
-    privateKeySecretRef:
-      name: "staging-issuer-account-key"
-    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
-    solvers:
-      - dns01:
-          webhook:
-            # This group needs to be configured when installing the helm package, otherwise the webhook won't have permission to create an ACME challenge for this API group.
-            groupName: acme.kaisers.info
-            solverName: hetzner
-            config:
-              secretName: hetzner-secret
-              zoneName: kaisers.info # (Optional): When not provided the Zone will searched in Hetzner API by recursion on full domain name
-              apiUrl: https://dns.hetzner.com/api/v1
----
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-prod
-  namespace: cert-manager
-spec:
-  acme:
-    email: "admin@kaisers.info" # replace this
-    privateKeySecretRef:
-      name: "prod-issuer-account-key"
-    server: "https://acme-v02.api.letsencrypt.org/directory"
-    solvers:
-      - http01:
-          ingress:
-            class: "traefik"
-            ingressTemplate:
-              metadata:
-                annotations:
-                  kubernetes.io/ingress.class: "traefik"
-                  traefik.ingress.kubernetes.io/router.tls: "true"
-                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
-                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-                  #traefik.ingress.kubernetes.io/redirect-entry-point: "https"