From 49eb04022ca207a3b021f91f73fecff2dbdac301 Mon Sep 17 00:00:00 2001
From: Scrublord MacBad <Scrublord@Mac.Bad>
Date: Tue, 21 Apr 2026 22:35:48 +0200
Subject: [PATCH] fix: add explicit Certificate resources for cert-manager

---
 apps/production/kustomization.yaml       |  1 +
 apps/production/matrix-certificates.yaml | 64 ++++++++++++++++++++++++
 2 files changed, 65 insertions(+)
 create mode 100644 apps/production/matrix-certificates.yaml

diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml
index 06d9cee..3d4ac32 100644
--- a/apps/production/kustomization.yaml
+++ b/apps/production/kustomization.yaml
@@ -4,4 +4,5 @@ resources:
   # namespace.yaml hier entfernen!
   - matrix-postgres-auth.yaml
   - cert-issuer.yaml
+  - matrix-certificates.yaml
   - element-server-suite.yaml
\ No newline at end of file
diff --git a/apps/production/matrix-certificates.yaml b/apps/production/matrix-certificates.yaml
new file mode 100644
index 0000000..b06ea29
--- /dev/null
+++ b/apps/production/matrix-certificates.yaml
@@ -0,0 +1,64 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: matrix-axion1337-chat-cert
+  namespace: matrix
+spec:
+  secretName: matrix-axion1337-chat-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - matrix.axion1337.chat
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: account-axion1337-chat-cert
+  namespace: matrix
+spec:
+  secretName: account-axion1337-chat-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - account.axion1337.chat
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: mrtc-axion1337-chat-cert
+  namespace: matrix
+spec:
+  secretName: mrtc-axion1337-chat-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - mrtc.axion1337.chat
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: axion1337-chat-cert
+  namespace: matrix
+spec:
+  secretName: axion1337-chat-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - axion1337.chat
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: admin-axion1337-chat-cert
+  namespace: matrix
+spec:
+  secretName: admin-axion1337-chat-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - admin.axion1337.chat