From 62ac7f6f2aaeebffb958e6e921f803b48b664986 Mon Sep 17 00:00:00 2001
From: CJ_Clippy <cj@futureporn.net>
Date: Fri, 26 Apr 2024 22:19:45 +0000
Subject: [PATCH] use letsencrypt staging

---
 Makefile                                | 20 ++++++++++----------
 apps/base/podinfo/release.yaml          |  4 +---
 clusters/production/infrastructure.yaml |  2 +-
 3 files changed, 12 insertions(+), 14 deletions(-)

diff --git a/Makefile b/Makefile
index 0208f40..507fe58 100644
--- a/Makefile
+++ b/Makefile
@@ -28,8 +28,8 @@ tilt:
 	tilt up
 
 secrets:
-	kubectl delete secret link2cid --ignore-not-found
-	kubectl create secret generic link2cid \
+	kubectl --namespace futureporn delete secret link2cid --ignore-not-found
+	kubectl --namespace futureporn create secret generic link2cid \
 	--from-literal=apiKey=${LINK2CID_API_KEY}
 
 	kubectl --namespace cert-manager delete secret vultr --ignore-not-found
@@ -40,22 +40,22 @@ secrets:
 	kubectl --namespace windmill create secret generic vultr \
 	--from-literal=apiKey=${VULTR_API_KEY}
 
-	kubectl delete secret vultr --ignore-not-found
-	kubectl create secret generic vultr \
+	kubectl --namespace futureporn delete secret vultr --ignore-not-found
+	kubectl --namespace futureporn create secret generic vultr \
 	--from-literal=containerRegistryUsername=${VULTR_CONTAINER_REGISTRY_USERNAME} \
 	--from-literal=apiKey=${VULTR_API_KEY}
 
-	kubectl delete secret postgres --ignore-not-found
-	kubectl create secret generic postgres \
+	kubectl --namespace futureporn delete secret postgres --ignore-not-found
+	kubectl --namespace futureporn create secret generic postgres \
 	--from-literal=password=${POSTGRES_PASSWORD}
 
-	kubectl delete secret pgadmin --ignore-not-found
-	kubectl create secret generic pgadmin \
+	kubectl --namespace futureporn delete secret pgadmin --ignore-not-found
+	kubectl --namespace futureporn create secret generic pgadmin \
 	--from-literal=defaultEmail=${PGADMIN_DEFAULT_EMAIL} \
 	--from-literal=defaultPassword=${PGADMIN_DEFAULT_PASSWORD}
 
-	kubectl delete secret strapi --ignore-not-found
-	kubectl create secret generic strapi \
+	kubectl --namespace futureporn delete secret strapi --ignore-not-found
+	kubectl --namespace futureporn create secret generic strapi \
 	--from-literal=adminJwtSecret=${STRAPI_ADMIN_JWT_SECRET} \
 	--from-literal=apiTokenSalt=${STRAPI_API_TOKEN_SALT} \
 	--from-literal=appKeys=${STRAPI_APP_KEYS} \
diff --git a/apps/base/podinfo/release.yaml b/apps/base/podinfo/release.yaml
index e1d362e..48f9686 100644
--- a/apps/base/podinfo/release.yaml
+++ b/apps/base/podinfo/release.yaml
@@ -27,7 +27,7 @@ spec:
       className: "nginx"
       annotations:
         kubernetes.io/ingress.class: "nginx"
-        cert-manager.io/cluster-issuer: "letsencrypt-staging"
+        cert-manager.io/cluster-issuer: "letsencrypt"
         nginx.ingress.kubernetes.io/ssl-redirect: "true"
       hosts:
         - host: podinfo.sbtp.xyz
@@ -38,5 +38,3 @@ spec:
        - secretName: podinfo-tls
          hosts:
            - podinfo.sbtp.xyz
-
-           
\ No newline at end of file
diff --git a/clusters/production/infrastructure.yaml b/clusters/production/infrastructure.yaml
index 79cb80e..ce67ceb 100644
--- a/clusters/production/infrastructure.yaml
+++ b/clusters/production/infrastructure.yaml
@@ -35,7 +35,7 @@ spec:
     - patch: |
         - op: replace
           path: /spec/acme/server
-          value: https://acme-v02.api.letsencrypt.org/directory
+          value: https://acme-staging-v02.api.letsencrypt.org/directory
       target:
         kind: ClusterIssuer
         name: letsencrypt