Update TLS configuration for ghost ingress

lordmathis · lordmathis · commit 59d885f06b2b · 2026-01-18T00:57:16.000+01:00
diff --git a/.github/workflows/endpoints.txt.enc b/.github/workflows/endpoints.txt.enc
@@ -1,14 +1,14 @@
 {
-	"data": "ENC[AES256_GCM,data:PqhX3xN2YfsrUCla+TA0nXhrkRVIdGbwMJEIqXVuI8IgPE4oSoVUFEKNYi4gtMNl3HxWXWnfop+5O644x+7aUYevwMFrH4GcvtXaXGjXvd34OzrOv9m2w2xGbOJ756QGFGvC2zww/GjCpPkUn49WO2y+c1PJ/D8x7LAAULC+j2MirawNz5V05Dk3+W0N5HKPfMfuwcpB18klreFPObg6JK066ITKXDdP02aB9ukiDMlAoD+685SSoMZlgfvWofUaNwkZtOXLrZdl6nmTYySD3kMyqCbkYwgT5pZPJUR6sT9WoPlods6qlzJKKLQk8x38gqGiHnBQZcMwuDIF,iv:2jeGwauqCNDdMgueVsiu3SlsXE/9bssybvdfNeyTr8A=,tag:xLeHcmIOFUS/uHFtA1/35A==,type:str]",
+	"data": "ENC[AES256_GCM,data:0s0vzu+E1O1oHXeuhZHcoiePe+vRGw0PkcZaSDNhxcvjmjH2SvG1wY0H+WQnQuqcn6NgstQDvCmPdfzsibwRh02BCcpOvKbA9OjAiBtvYrZuog04hljrHzLqw5I+tsf7P/SO3zoMDhqYCY8LQNHMpK6jgJbEavVm9KPtBPAqSHlyig+DeCRozrYQXsouj43HCvUGfvB5gEtRhde8EJ46ZsJJoVSi/VzAd8uCO5CammlaLa0IU5o3JtSDLSYW2OeDDXRB,iv:Bz5awcO3OqDHRzHbLSCvjGQz1hER8Bq2Dp+fMTGDzz4=,tag:4gfjgj0uQG8q5//dnH+2mw==,type:str]",
 	"sops": {
 		"age": [
 			{
 				"recipient": "age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkeU40ODR1c0p5Nnc1OXlV\nd0N0SFJDMmFoQ09SMUVESDkwWnZvZkExUUZBCjZCaGJIbGIzMDcrVFE0Q0M0bzky\nYW4rRzRaWUVMcGUwU0dvRXFVeVlodzgKLS0tIG9GbEdGWDc5ampqTThYay8rd3lT\nSnZlN0VJaFVXT2RJRTRhV1ZmaERDRTQKZR6B3mu6U0o9XComkSfdS8raF7MHyKSv\nGpgrGnwZwln1yO3CSJsGPeZXxLbg7eaEZkt5UQav0g2OMvyTN/cO6g==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxaVI1dDFUSzV0VzV0VlJl\nOEhHR1FzVERGYlpiREN1OFdZWGhQL3B1bEdZCnJ0MHlCYy9LZHAyaW9LRmVXdDFp\nWitoSzg4dXR0Sm5peXdkRkhORE1RcEEKLS0tIDdsb05lRzhmaG5FenpQbHNWbFBC\nRVRxNlJJdlZHY2dyRXdvdFJjYWtZczAKwHsBY3N0vXhrqNKuI0WXvWUcUUG4aR4E\nHmvmu9ZHzrZx4Bz41vNoUfDfVNagL8ZpA7ojRv1R5z1YQB6F6R+FEg==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2026-01-17T23:46:24Z",
-		"mac": "ENC[AES256_GCM,data:VbXB+urPQ4nbhrnwQVBNuC7i25wDTrhjDYF6yajSnzSHhTfZkHH/3+yL8Qolej/WaBMjhzsbk98qYrgUjzM2xex96Aov+G5EzmmCsuyNmWbiN6AQRqsr0cjKeDTQyChPckNDCr1ZNLVkYFJ5Si1mlYOQ9+KUxG3J7oW3epM7M0g=,iv:8KJYUfnmPyeawFoLlZUhpRI5ezPIYwDpgUeZnho9emA=,tag:q/O2z6HEcA9kwEMUUWvLDw==,type:str]",
+		"lastmodified": "2026-01-17T23:55:49Z",
+		"mac": "ENC[AES256_GCM,data:+eQjLtiDxRiYWmhw3Lg/UUCqr5OBDFTZQjFyW0xUwuftzh6ArDPc6I/3Oam4cn8sHzecIuFtfVn1d06eXyO6odq772FClCmM0JXX4FCZGFKZWyDl8Yugc8y8NrgP9Bb3kCIEKqOSNqswhCai29HLm7cqK9LWu4go2Ru0urZxvfs=,iv:yiI7wO3RtB/K4+g4f/oBKC7dUObM3N+ktk9yxWgZe/Y=,tag:Eyyo5KZg9E980zGmZnsGdA==,type:str]",
 		"version": "3.11.0"
 	}
 }
diff --git a/apps/prod/ghost/ingress.yaml b/apps/prod/ghost/ingress.yaml
@@ -11,4 +11,6 @@ spec:
     kind: Rule
     services:
     - name: ghost
-      port: 80
+      port: 80
+  tls:
+    secretName: wildcard-secondary-tls
diff --git a/infrastructure/configs/cert-manager/certificate.yaml b/infrastructure/configs/cert-manager/certificate.yaml
@@ -30,7 +30,7 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: wildcard-secondary
-  namespace: traefik
+  namespace: ghost
 spec:
   secretName: wildcard-secondary-tls
   dnsNames:

Original file line number	Diff line number	Diff line change
`@@ -1,14 +1,14 @@`
`1`	`1`	`{`
`2`		`- "data": "ENC[AES256_GCM,data:PqhX3xN2YfsrUCla+TA0nXhrkRVIdGbwMJEIqXVuI8IgPE4oSoVUFEKNYi4gtMNl3HxWXWnfop+5O644x+7aUYevwMFrH4GcvtXaXGjXvd34OzrOv9m2w2xGbOJ756QGFGvC2zww/GjCpPkUn49WO2y+c1PJ/D8x7LAAULC+j2MirawNz5V05Dk3+W0N5HKPfMfuwcpB18klreFPObg6JK066ITKXDdP02aB9ukiDMlAoD+685SSoMZlgfvWofUaNwkZtOXLrZdl6nmTYySD3kMyqCbkYwgT5pZPJUR6sT9WoPlods6qlzJKKLQk8x38gqGiHnBQZcMwuDIF,iv:2jeGwauqCNDdMgueVsiu3SlsXE/9bssybvdfNeyTr8A=,tag:xLeHcmIOFUS/uHFtA1/35A==,type:str]",`
	`2`	`+ "data": "ENC[AES256_GCM,data:0s0vzu+E1O1oHXeuhZHcoiePe+vRGw0PkcZaSDNhxcvjmjH2SvG1wY0H+WQnQuqcn6NgstQDvCmPdfzsibwRh02BCcpOvKbA9OjAiBtvYrZuog04hljrHzLqw5I+tsf7P/SO3zoMDhqYCY8LQNHMpK6jgJbEavVm9KPtBPAqSHlyig+DeCRozrYQXsouj43HCvUGfvB5gEtRhde8EJ46ZsJJoVSi/VzAd8uCO5CammlaLa0IU5o3JtSDLSYW2OeDDXRB,iv:Bz5awcO3OqDHRzHbLSCvjGQz1hER8Bq2Dp+fMTGDzz4=,tag:4gfjgj0uQG8q5//dnH+2mw==,type:str]",`
`3`	`3`	`"sops": {`
`4`	`4`	`"age": [`
`5`	`5`	`{`
`6`	`6`	`"recipient": "age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m",`
`7`		`- "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkeU40ODR1c0p5Nnc1OXlV\nd0N0SFJDMmFoQ09SMUVESDkwWnZvZkExUUZBCjZCaGJIbGIzMDcrVFE0Q0M0bzky\nYW4rRzRaWUVMcGUwU0dvRXFVeVlodzgKLS0tIG9GbEdGWDc5ampqTThYay8rd3lT\nSnZlN0VJaFVXT2RJRTRhV1ZmaERDRTQKZR6B3mu6U0o9XComkSfdS8raF7MHyKSv\nGpgrGnwZwln1yO3CSJsGPeZXxLbg7eaEZkt5UQav0g2OMvyTN/cO6g==\n-----END AGE ENCRYPTED FILE-----\n"`
	`7`	`+ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxaVI1dDFUSzV0VzV0VlJl\nOEhHR1FzVERGYlpiREN1OFdZWGhQL3B1bEdZCnJ0MHlCYy9LZHAyaW9LRmVXdDFp\nWitoSzg4dXR0Sm5peXdkRkhORE1RcEEKLS0tIDdsb05lRzhmaG5FenpQbHNWbFBC\nRVRxNlJJdlZHY2dyRXdvdFJjYWtZczAKwHsBY3N0vXhrqNKuI0WXvWUcUUG4aR4E\nHmvmu9ZHzrZx4Bz41vNoUfDfVNagL8ZpA7ojRv1R5z1YQB6F6R+FEg==\n-----END AGE ENCRYPTED FILE-----\n"`
`8`	`8`	`}`
`9`	`9`	`],`
`10`		`- "lastmodified": "2026-01-17T23:46:24Z",`
`11`		`- "mac": "ENC[AES256_GCM,data:VbXB+urPQ4nbhrnwQVBNuC7i25wDTrhjDYF6yajSnzSHhTfZkHH/3+yL8Qolej/WaBMjhzsbk98qYrgUjzM2xex96Aov+G5EzmmCsuyNmWbiN6AQRqsr0cjKeDTQyChPckNDCr1ZNLVkYFJ5Si1mlYOQ9+KUxG3J7oW3epM7M0g=,iv:8KJYUfnmPyeawFoLlZUhpRI5ezPIYwDpgUeZnho9emA=,tag:q/O2z6HEcA9kwEMUUWvLDw==,type:str]",`
	`10`	`+ "lastmodified": "2026-01-17T23:55:49Z",`
	`11`	`+ "mac": "ENC[AES256_GCM,data:+eQjLtiDxRiYWmhw3Lg/UUCqr5OBDFTZQjFyW0xUwuftzh6ArDPc6I/3Oam4cn8sHzecIuFtfVn1d06eXyO6odq772FClCmM0JXX4FCZGFKZWyDl8Yugc8y8NrgP9Bb3kCIEKqOSNqswhCai29HLm7cqK9LWu4go2Ru0urZxvfs=,iv:yiI7wO3RtB/K4+g4f/oBKC7dUObM3N+ktk9yxWgZe/Y=,tag:Eyyo5KZg9E980zGmZnsGdA==,type:str]",`
`12`	`12`	`"version": "3.11.0"`
`13`	`13`	`}`
`14`	`14`	`}`