Initial commit: cert-manager API server

FastAPI-based SSL certificate automation server.
- Google Public CA wildcard cert issuance via certbot
- Cloudflare DNS-01 challenge with auto EAB key generation
- APISIX multi-instance deployment with domain-instance mapping
- Vault integration for all secrets
- Bearer token auth, retry logic, Discord DM alerts
- Auto-renewal scheduler (daily 03:00 UTC)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
kappa
2026-02-28 17:39:14 +09:00
commit 1cd1f0cfc2
12 changed files with 782 additions and 0 deletions

20
config.json Normal file
View File

@@ -0,0 +1,20 @@
{
"google_acme_server": "https://dv.acme-v02.api.pki.goog/directory",
"certbot_email": "kappa@inouter.com",
"gcp_project": "cert-manager-495109",
"dns_propagation_seconds": 30,
"apisix_instances": [
{
"name": "kr1",
"admin_url": "http://100.84.111.28:9180"
},
{
"name": "osaka",
"admin_url": "http://100.108.39.107:9180"
}
],
"domain_instance_map": {
"*.jp.inouter.com": ["osaka"],
"*.kr.inouter.com": ["kr1"]
}
}