# Certificate for UniFi OS Server (unifi.internal:11443).
# Not installed automatically: export it and upload it in UniFi once a year.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: unifi-internal
  namespace: external-certs
spec:
  secretName: unifi-internal-tls
  commonName: unifi.internal
  dnsNames:
    - unifi.internal
  ipAddresses:
    - 192.168.5.60
  duration: 9528h      # 397 days, the maximum Apple devices accept
  renewBefore: 720h    # 30 days
  privateKey:
    algorithm: RSA
    size: 2048
  usages:
    - server auth
    - digital signature
    - key encipherment
  issuerRef:
    kind: ClusterIssuer
    name: homelab-ca