Certificates expired

[tazjin]

TLS certificates in *.tendollarbond.com have expired. Must have missed a letsencrypt reminder.

At the moment we use DNS based challenges to fetch new certificates through LE, but that's done by me running a command. Needs a proper fix.

[tazjin]

Certificates have been replaced in k8s, nginx restarted. Pending restart of other services that need certs ...

[tazjin]

Jabber is also done, Mumble still pending. I'll wait until early tomorrow when it's not in use.

[tazjin]

Interesting to keep an eye on mumble-voip/mumble#2221

A proper fix for this may involve a k8s controller doing letsencrypt-renews. We could also use that to update the certs in Mumble as per above.

[tazjin]

All certificates are replaced (with a bit of a delay).

Next step is doing this automatically.

[tazjin]

I wrote a controller to deal with certificate rerieval / renewal: https://github.com/tazjin/kubernetes-letsencrypt/