From 959fc784ee5f09a216ef574722f7fcbaf69f9923 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Zo=C3=AB?= <zoe@myhosted.site>
Date: Sat, 30 May 2026 20:33:15 -0700
Subject: [PATCH] fix: intake TLS uses Certificate + secretName pattern, not
 certResolver

---
 k8s/manifests/intake-ingress.yaml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/k8s/manifests/intake-ingress.yaml b/k8s/manifests/intake-ingress.yaml
index 1f0059b..53bfe11 100644
--- a/k8s/manifests/intake-ingress.yaml
+++ b/k8s/manifests/intake-ingress.yaml
@@ -1,4 +1,18 @@
 ---
+# Certificate for janet.ctz.fyi
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: janet-ctz-fyi-tls
+  namespace: autojanet
+spec:
+  secretName: janet-ctz-fyi-tls
+  dnsNames:
+    - janet.ctz.fyi
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+---
 # IngressRoute: janet.ctz.fyi → intake service
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -15,4 +29,4 @@ spec:
         - name: intake
           port: 80
   tls:
-    certResolver: letsencrypt
+    secretName: janet-ctz-fyi-tls