Enable production TLS for Authentik

2026-10-16 16:46:10 +00:00
parent a8431d15c6
commit db3c8e4694
2 changed files with 4 additions and 4 deletions
@@ -90,14 +90,13 @@ authentik:
        cpu: "2"
        memory: 2Gi
    # Route the LAN hostname through the cluster's shared ingress-nginx IP.
-    # Prove DNS-01 issuance against Let's Encrypt staging first; switch this
-    # annotation to letsencrypt-prod only after the staging Certificate is
-    # Ready and HTTPS routing has been tested.
+    # DNS-01 issuance and HTTPS routing were proven against Let's Encrypt's
+    # staging service before switching to this browser-trusted issuer.
    ingress:
      enabled: true
      ingressClassName: nginx
      annotations:
-        cert-manager.io/cluster-issuer: letsencrypt-staging
+        cert-manager.io/cluster-issuer: letsencrypt-prod
      hosts:
        - auth.ahmza.com
      tls: