chore: use RSA certificates and clusterIP on elasticsearch

elasticsearch/cluster.yaml

@@ -27,6 +27,8 @@ spec:
   version: 8.15.2
   http:
     service:
+      spec:
+        type: ClusterIP
       metadata:
         annotations:
           external-dns.alpha.kubernetes.io/hostname: elastic.dogar.dev

helm/values/externaldns.values.yaml

@@ -1,3 +1,4 @@
+interval: 10s
 provider: pihole
 policy: upsert-only
 txtOwnerId: "homelab"

helm/values/gitea.values.yaml

@@ -12,7 +12,6 @@ ingress:
   className: nginx-internal
   annotations:
     cert-manager.io/cluster-issuer: cloudflare-issuer
-    cert-manager.io/private-key-algorithm: ED25519
     cert-manager.io/acme-challenge-type: dns01
     cert-manager.io/private-key-size: "4096"
   hosts:

helm/values/pihole.values.yaml

@@ -14,11 +14,9 @@ persistentVolumeClaim:
 ingress:
   enabled: true
   annotations:
-    cert-manager.io/cluster-issuer: cluster-issuer
+    cert-manager.io/cluster-issuer: cloudflare-issuer
-    nginx.ingress.kubernetes.io/affinity: "cookie"
+    cert-manager.io/acme-challenge-type: dns01
-    nginx.ingress.kubernetes.io/session-cookie-name: "http-cookie"
+    cert-manager.io/private-key-size: "4096"
-    nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
-    nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
   hosts:
     - pihole.dogar.dev
   tls:

helm/values/prometheus.values.yaml

@@ -8,8 +8,8 @@ grafana:
     ingressClassName: nginx-internal
     annotations:
       cert-manager.io/cluster-issuer: cloudflare-issuer
-      cert-manager.io/private-key-algorithm: ED25519
       cert-manager.io/acme-challenge-type: dns01
+      cert-manager.io/private-key-size: "4096"
     hosts:
       - grafana.dogar.dev
     tls: