---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-rfc2136
spec:
  acme:
    email: admin@hxme.net
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: letsencrypt-rfc2136
    solvers:
      - dns01:
          rfc2136:
            nameserver: hawke.hxst.com.au:53
            tsigKeyName: "hxme-update-key"
            tsigAlgorithm: HMACSHA512
            tsigSecretSecretRef:
              name: hxme-update-key
              key: hxme-update-key

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: wildcard-hxme-net
  namespace: home-server
spec:
  secretName: wildcard-hxme-net
  secretTemplate:
    annotations:
      replicator.v1.mittwald.de/replication-allowed: "true"
      replicator.v1.mittwald.de/replicate-to: "home-media"
  issuerRef:
    name: letsencrypt-rfc2136
    kind: ClusterIssuer
  commonName: "hxme.net"
  dnsNames:
    - "hxme.net"
    - "*.hxme.net"