From 82a3d02cfef7582f55747fd5bbf17fe5648c6619 Mon Sep 17 00:00:00 2001
From: SeanOMik <seanomik@gmail.com>
Date: Thu, 13 Apr 2023 00:56:51 -0400
Subject: [PATCH] Test this wildcard cert with sonarr

---
 cluster/apps/download/sonarr/helm-release.yaml | 6 +++++-
 cluster/core/cert-manager/wildcard-cert.yaml   | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/cluster/apps/download/sonarr/helm-release.yaml b/cluster/apps/download/sonarr/helm-release.yaml
index e06b73d..688af89 100644
--- a/cluster/apps/download/sonarr/helm-release.yaml
+++ b/cluster/apps/download/sonarr/helm-release.yaml
@@ -49,10 +49,14 @@ spec:
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
           traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
         hosts:
-          - host: "sonarr.${SECRET_NEW_DOMAIN}"
+          - host: &host "sonarr.${SECRET_NEW_DOMAIN}"
             paths:
               - path: /
                 pathType: Prefix
+        tls:
+          - hosts:
+              - *host
+            secretName: wildcard-main-tls
     persistence:
       config:
         enabled: true
diff --git a/cluster/core/cert-manager/wildcard-cert.yaml b/cluster/core/cert-manager/wildcard-cert.yaml
index 58ceafe..9065224 100644
--- a/cluster/core/cert-manager/wildcard-cert.yaml
+++ b/cluster/core/cert-manager/wildcard-cert.yaml
@@ -8,7 +8,7 @@ spec:
 
   secretTemplate:
     annotations:
-      replicator.v1.mittwald.de/replicate-to: "traefik"
+      replicator.v1.mittwald.de/replicate-to: "traefik,download"
 
   duration: 2160h # 90d
   renewBefore: 360h # 15d