apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: zerossl
spec:
  acme:
    server: https://acme.zerossl.com/v2/DV90
    email: zerossl@dustinhatch.me
    externalAccountBinding:
      keyID: f06nxtk433oeVdcaDLp9Iw
      keySecretRef:
        name: zerossl-eab
        key: secret
    privateKeySecretRef:
      name: zerossl-prod

    solvers:
    - dns01:
        cnameStrategy: Follow
        cloudflare:
          apiTokenSecretRef:
            name: cloudflare
            key: cloudflare.api-token
    - dns01:
        cnameStrategy: Follow
        acmeDNS:
          host: https://auth.acme-dns.io/
          accountSecretRef:
            name: acme-dns
            key: acme-dns.json
      selector:
        dnsNames:
        - pyrocufflink.blue
        - '*.pyrocufflink.blue'
        - pyrocufflink.net
        - '*.pyrocufflink.net'
        - dustin.hatch.name
        - '*.dustin.hatch.name'
        - aimee-os.org
        - '*.aimee-os.org'
        - '*.import.firefly.pyrocufflink.blue'