mirror of
https://github.com/shankar0123/certctl.git
synced 2026-06-07 19:51:33 +00:00
shankar0123
ec21c9bb29
M28: ACME Renewal Information (RFC 9702) — CA-directed renewal timing with cert ID computation, directory endpoint discovery, graceful degradation for non-ARI CAs. 19 tests. M29: Email notifier wiring + scheduled certificate digest — SMTP connector bridged to service layer via NotifierAdapter, DigestService with HTML email template, 7th scheduler loop (24h), digest preview/send API endpoints and GUI card. 21 tests. M30: Production-ready Helm chart — server Deployment, PostgreSQL StatefulSet, agent DaemonSet, ConfigMaps, Secrets, Ingress, security contexts, health probes, example values for dev/prod/ACME scenarios. Also: OpenAPI spec updates, MCP tool additions, CI helm-lint job, documentation updates across 5 doc files and README. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
# Certctl with External PostgreSQL Database
|
|
# Use this when PostgreSQL is managed externally:
|
|
# - AWS RDS
|
|
# - Cloud SQL (Google Cloud)
|
|
# - Azure Database for PostgreSQL
|
|
# - Self-managed PostgreSQL server
|
|
|
|
server:
|
|
replicas: 2
|
|
|
|
auth:
|
|
type: api-key
|
|
apiKey: "CHANGE_ME"
|
|
|
|
issuer:
|
|
local:
|
|
enabled: true
|
|
|
|
# Pass external database URL via environment variable
|
|
env:
|
|
CERTCTL_DATABASE_URL: "postgres://certctl:CHANGE_ME@postgres.example.com:5432/certctl?sslmode=require"
|
|
|
|
# Disable internal PostgreSQL
|
|
postgresql:
|
|
enabled: false
|
|
|
|
agent:
|
|
enabled: true
|
|
kind: DaemonSet
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
hosts:
|
|
- host: certctl.example.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
|
|
# For AWS RDS with IAM authentication:
|
|
# env:
|
|
# CERTCTL_DATABASE_URL: "postgres://certctl:CHANGE_ME@mydb.123456789.us-east-1.rds.amazonaws.com:5432/certctl?sslmode=require"
|
|
|
|
# For Google Cloud SQL:
|
|
# env:
|
|
# CERTCTL_DATABASE_URL: "postgres://certctl:CHANGE_ME@/certctl?host=/cloudsql/PROJECT:REGION:INSTANCE&sslmode=require"
|
|
|
|
# For Azure Database:
|
|
# env:
|
|
# CERTCTL_DATABASE_URL: "postgres://certctl@servername:CHANGE_ME@servername.postgres.database.azure.com:5432/certctl?sslmode=require"
|