update certs

helmfile.d/01-infrastructure.lock

@@ -1,5 +1,11 @@
 version: 0.170.1
 dependencies:
+- name: cert-manager
+  repository: https://charts.jetstack.io
+  version: v1.19.2
+- name: cert-manager-webhook-hetzner
+  repository: https://vadimkim.github.io/cert-manager-webhook-hetzner
+  version: 1.4.0
 - name: rook-ceph
   repository: https://charts.rook.io/release
   version: v1.18.8
@@ -12,5 +18,5 @@ dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
   version: 37.4.0
-digest: sha256:66b2e4b590af3ee51f97d61435400977ceb8d70ddfc50d638ccfaeede79e8a6f
-generated: "2025-12-07T13:19:28.002423348-07:00"
+digest: sha256:23d6b70fcb5e17bfa1e8fdc576a8057128b3bec68020fa8275a553b5caa23e99
+generated: "2025-12-14T14:13:45.546956484-07:00"

helmfile.d/01-infrastructure.yaml

@@ -5,6 +5,10 @@ repositories:
     url: https://traefik.github.io/charts
   - name: tailscale
     url: https://pkgs.tailscale.com/helmcharts
+  - name: jetstack
+    url: https://charts.jetstack.io
+  - name: cert-manager-webhook-hetzner
+    url: https://vadimkim.github.io/cert-manager-webhook-hetzner
 
 releases:
   # networking
@@ -14,6 +18,24 @@ releases:
     chart: ../metallb
     values:
       - ../metallb/values.yaml.gotmpl
+  - name: cert-manager
+    namespace: cert-manager
+    createNamespace: true
+    chart: jetstack/cert-manager
+    values:
+      - ../cert-manager/values.yaml.gotmpl
+  - name: cert-manager-webhook-hetzner
+    namespace: cert-manager
+    createNamespace: true
+    chart: cert-manager-webhook-hetzner/cert-manager-webhook-hetzner
+    values:
+      - ../cert-manager-hetzner-webhook/values.yaml.gotmpl
+  - name: cert-manager-issuers
+    namespace: cert-manager
+    createNamespace: true
+    chart: ../cert-manager-issuers
+    values:
+      - ../cert-manager-issuers/values.yaml.gotmpl    
   - name: traefik
     namespace: traefik
     createNamespace: true

helmfile.d/02-datastore.lock

@@ -13,4 +13,4 @@ dependencies:
   repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
   version: 5.7.4
 digest: sha256:f8989df670b3574b6d87438486b66fdaf44bc1ed379d3a98e00963a27703003a
-generated: "2025-12-14T12:59:10.595864383-07:00"
+generated: "2025-12-14T14:14:05.060998516-07:00"

helmfile.d/03-apps.lock

@@ -30,5 +30,5 @@ dependencies:
 - name: static-site
   repository: git+https://github.com/cfpb/static-site@charts?ref=main
   version: 0.1.1
-digest: sha256:94f6df708ccbabc40cb875caa57f44f1be7bac60190dea00a24ffdc80925e8ec
-generated: "2025-12-14T12:59:30.49543268-07:00"
+digest: sha256:e957d861b7351e1e89af29b29e8de19621c9069131669d32217276e8118e634b
+generated: "2025-12-14T14:14:24.483935436-07:00"

helmfile.d/03-apps.yaml

@@ -56,12 +56,12 @@ releases:
       - ../53ll/values.yaml.gotmpl
 
   # dev tools
-  # - name: gitea
-  #   namespace: gitea
-  #   createNamespace: true
-  #   chart: gitea/gitea
-  #   values:
-  #     - ../gitea/values.yaml.gotmpl
+  - name: gitea
+    namespace: gitea
+    createNamespace: true
+    chart: gitea/gitea
+    values:
+      - ../gitea/values.yaml.gotmpl
 
   # backups
   - name: ghost-backup