Moved to staging domain

apps/authelia/release.yaml

@@ -17,7 +17,7 @@ spec:
       enabled: true
       tls:
         enabled: true
-        secret: ${domain/\./-}-tls
+        secret: ${domain//./-}-tls
       traefikCRD:
         enabled: true
         entryPoints:
@@ -49,8 +49,8 @@ spec:
             value: "JustATest"
       session:
         cookies:
-          - subdomain: login
-            domain: ${domain}
+          - subdomain: login${subdomain}
+            domain: ${topdomain}
 
       storage:
         postgres:

apps/traefik-dashboard/ingress.yaml

@@ -16,4 +16,4 @@ spec:
         - name: api@internal
           kind: TraefikService
   tls:
-    secretName: ${domain/\./-}-tls
+    secretName: ${domain//./-}-tls

apps/whoami.yaml

@@ -55,4 +55,4 @@ spec:
         - name: whoami
           port: 80
   tls:
-    secretName: ${domain/\./-}-tls
+    secretName: ${domain//./-}-tls

clusters/titan.lan.huizinga.dev/apps.yaml

@@ -17,7 +17,10 @@ spec:
     name: flux-system
   postBuild:
     substitute:
-      domain: huizinga.dev
+      domain: staging.huizinga.dev
+      # Specifically for authelia
+      subdomain: .staging
+      topdomain: huizinga.dev
   path: ./apps
   prune: true
   wait: true

infrastructure/configs/certificates.yaml

@@ -8,7 +8,22 @@ spec:
   issuerRef:
     name: letsencrypt
     kind: ClusterIssuer
-  commonName: "*.huizinga.dev"
+  commonName: "huizinga.dev"
   dnsNames:
     - "huizinga.dev"
     - "*.huizinga.dev"
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: staging-huizinga-dev
+  namespace: default
+spec:
+  secretName: staging-huizinga-dev-tls
+  issuerRef:
+    name: letsencrypt
+    kind: ClusterIssuer
+  commonName: "staging.huizinga.dev"
+  dnsNames:
+    - "staging.huizinga.dev"
+    - "*.staging.huizinga.dev"