Update secret.enc.yaml and certificate.yaml with new domain configurations

cluster-vars/prod/secret.enc.yaml

@@ -4,16 +4,17 @@ metadata:
     name: cluster-vars-prod
     namespace: flux-system
 stringData:
-    DOMAIN: ENC[AES256_GCM,data:XNCcMooA8mpX,iv:ISpq1tL1uet2leHFFJO1mF8KgFG59yLJfAU9sIO6/Z4=,tag:Fnw41xxfqF9moAOZVHhGVw==,type:str]
-    GITEA_DOMAIN: ENC[AES256_GCM,data:IdFe5Rzd5iaR7n/x3g==,iv:hvzuCv9UQraszs9ghT/kfCmCTvKW0mYX+3ey9/5WxOU=,tag:vvxNdP28kbNBgQ+OHjLcrw==,type:str]
-    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:wnq31/g/SayjHkb4KOw=,iv:bTta2+75BWJ+0VBGW7c0bTr02QqnG5G2Tkc7QV5uxi4=,tag:4AWPXQXcFjAQ713LrUjINw==,type:str]
-    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:oDVXLO86MuEUoL22uarYfqQ=,iv:SCXs/Ykxyv0Vf+6k9NNlOTFVvd4d8A2AONBgXKVDucw=,tag:TD94S+IoxHZEBO7zYEt9jQ==,type:str]
-    LEMMA_DOMAIN: ENC[AES256_GCM,data:ww8NRH1M81b4SDu5mk+0,iv:1fUKBIV+0I2uikQD9k+E2Omsp6Ytw1/r4rZcffIL6z4=,tag:187cl0/3wFGtl5JNXhCOyQ==,type:str]
-    K9S_DOMAIN: ENC[AES256_GCM,data:VPaFnVUNsQ2Y5v8Ucw==,iv:JuNlvv3tl3aS+jwR47JNJ3lQiFrygodvlG5gPqkq6bM=,tag:by2NHgiFnKBQpPa8l0yueQ==,type:str]
-    GHOST_DOMAIN: ENC[AES256_GCM,data:KNdzVN7YG0W1HXfArNF1,iv:IfNvTA38MHi/BznuBuyloFMg7z+09oKYexAkdVPMnho=,tag:bMhFBhUbPWICTu3gZn2CYw==,type:str]
-    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:t4Wke6LuTkBlBBi+c4VUnbEuPp+fMUc=,iv:jfJSAZgJoGO0XnCUhMfxkj6iWpbw6PaMbijrSsgvaXM=,tag:j4HYTFvNrkd6+DTJhivUfA==,type:str]
-    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:6UxCVyczLhLhlyKCzckoB/Q=,iv:o/LSE8rMLgUj4JtkvgvnRwHSOOtmRXRnI2NzhfuJ3FQ=,tag:RCtFr5Emn6IZNRevl7+RGQ==,type:str]
-    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:FuK4iHI2aUQJTSS5cx5XNJ0=,iv:YVaUnTRbWaE8t8PsfpN56f0OYrW/FPtT1TJv+Y8/xYk=,tag:SToV5RdHrLh6eMxITNocVA==,type:str]
+    DOMAIN: ENC[AES256_GCM,data:ARYm5V97hv8k,iv:A3DKLAo+YU3KqgGGBVzUmLxjCpXH/NcJ36A4VPrlM+8=,tag:FzBnb2azMd/fymkmF0Ehdw==,type:str]
+    DOMAIN2: ENC[AES256_GCM,data:1FuwAA2P7S0P0A==,iv:GjmO4gL4hf+5e6+OsSBDYIDFAUm0UpJqv6Czf82/gh4=,tag:djwOgz6Wuh2NMt77ewWjlA==,type:str]
+    GITEA_DOMAIN: ENC[AES256_GCM,data:gHNHYOA2Xz8k3AzDzA==,iv:Nm/0AVCrgzQTarGGAnk8OGlTyxSWiLCW3vrUQYDbwAQ=,tag:mHDNIYVIXNCHqk0BSFmeRQ==,type:str]
+    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:DITHZ5koHGCEvcL6OlI=,iv:882jyaW9sTWs6NNdt4TAM01ITqpZ1vEVqt/Tycdi+EI=,tag:CpIOw7E+AROQCn+j5hhcaQ==,type:str]
+    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:0JgETkCWkaN6EX/8nI8ynhc=,iv:6n49BhONemZhPjNYRHrgpAmjT4ZUgo02DyZG+1I8Md4=,tag:xHXdT8Jfn0vG+IkP5URqOQ==,type:str]
+    LEMMA_DOMAIN: ENC[AES256_GCM,data:KlG/UfogLseYeYcR8LZe,iv:yCGtYucHil2e2QVWt6lko38xi4kl0d0JkF/igir+/PE=,tag:nCWwdsLEYdoLZaXBAd98FA==,type:str]
+    K9S_DOMAIN: ENC[AES256_GCM,data:2msIU4arlghK3ENMaA==,iv:q3w5cMRqJLMZamgWBONOkKvcqaI+emDSneBlqtG9T/8=,tag:lm//CYghOeK2Te/HbBn7YA==,type:str]
+    GHOST_DOMAIN: ENC[AES256_GCM,data:YojwKE85R+VsgU9igqBWqw==,iv:CLMLAZbtSr5JhJfbSm4HbhXIT9yBfDOTvEMO7mP+oVY=,tag:+yyZHXLU9V0D7zrb52VTlw==,type:str]
+    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:oqpHEXz3EAvdMFLWGmlZPJhD+3VG0xs=,iv:rQk/87ol3A2jkM1LKreNa6JkJHvNCN8rbO1CwZkfC5k=,tag:Ea+2Sc1yFhv9VrOrVvClRg==,type:str]
+    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:zHIcc3us+i6xSJU++cunu0M=,iv:K+SVsZcQnU+TjJRl3e77BrOgLPsc4ffXDwzjLcfhAVM=,tag:c5Qpfiz5aLXBf8ScG56tzw==,type:str]
+    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:4l6d0YfqD15E9QLd9wgVrjI=,iv:+CSR9hJTbpRbrvEjFnyt8TqzBjnTu9HrHVsqfKq+Nxs=,tag:f+lqAkEhkzOO6DNtyPJtpw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,14 +24,14 @@ sops:
         - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3T1BpWE41NkdEWDU3eUF4
-            d1pDa3JZOWp2a0psZ0ZkdGlLdUFyRkRaSENJCm1nTFF1am9ac2FRb0Z1WHFLb25v
-            eDVROUl5SFg2aUc4UGM1T0FzM2xXMDQKLS0tIG9kWFV4RTZENXR5Nkd5eVZLVjBD
-            MnJIN3dCQmZ4MmJINkwxbzhuakRWak0K7gAUmMZnuQzYRyH7J3H9LBtTdOJyB4dG
-            6qVp4L5xKkNBdCss8JXMXkpZC3ibmsWjycUeQmsjl/j3bIG01Xiiuw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMUmJFMnJobUF0UzN6Z2RL
+            NGFjMDFOYXVFaytaMWZ5aXVnQXVBd05RQlRJCkRUaDhwOGhEYitZZkhaYUI1N01a
+            UHpmSGNmYmhTcWhzMG9NQUo2SlIyVWsKLS0tIENxNVJCcE0wdUExVlA1blpUVUZI
+            THRSdkFZL095MUtOTXY5ZEtZYXZod2MKS96q6H4UhhuxorCpLDbYGXEXRvakFY2Q
+            0tmJUKC1nUpaPWuuTlSpJUw0ZVdpgsAQwrvJ4eSWF7U0ohndgpFSKg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-03-23T15:16:42Z"
-    mac: ENC[AES256_GCM,data:GwwTe840WKdsOQOgcaC4kZ++1v/s0VZJVS2XQesS41ZLE8Z7yd/P+6oGvmXFOuYFRsiRZ0oXXoB61A3mwxD4D9cnagJIoDDwNDxzS3MCBaZ2xFzDHymiuKWPStA8VELjAPG1S/E16lol+aKlt93WQJkKRCrBG/Gpdkl+Tkst5qg=,iv:LBSOmFIvtJR5bs1rfpTYApeLtuRw6Aa9LFrwkQm3z4E=,tag:VkOHjcdcbN7lcYVGlzctGQ==,type:str]
+    lastmodified: "2025-04-18T12:12:33Z"
+    mac: ENC[AES256_GCM,data:kx8d+dfSsYOBwHtt8cIUigGfVjYaoRovisAC4J+DBj9DKMqLDbCljWz2UZ99cxgED+Fd261358019JpNTU9inPLmF9B7NYoTHvHPUGzfgV9gXzeJhvxRT4+Gq3BcLtpwW5RztppHWMmupVnESOxeehS8QBSd2MbCA9LbQf6VJFU=,iv:iNKQUG6H5NFrDu8e+zdxh69UdHlT9kTYen4jW8iBpwc=,tag:MG47q3EqVMtxgQbd75GCEA==,type:str]
     pgp: []
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
-    version: 3.9.4
+    version: 3.9.0

infrastructure/configs/cert-manager/certificate.yaml

@@ -9,6 +9,19 @@ spec:
   dnsNames:
     - "${DOMAIN}"
     - "*.${DOMAIN}"
+  issuerRef:
+    name: cloudflare-prod
+    kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: domain2
+  namespace: traefik
+spec:
+  secretName: domain2-tls
+  dnsNames:
+    - "${GHOST_DOMAIN}"
   issuerRef:
     name: cloudflare-prod
     kind: ClusterIssuer