Update cert-manager

code/kubes/cert-manager/sync.sh

@@ -1,7 +1,8 @@
 #!/bin/sh
 
-sudo helm install \
+sudo helm upgrade --install \
   cert-manager jetstack/cert-manager \
   --namespace cert-manager \
   --create-namespace \
-  --version v1.13.2 \
+  --version v1.16.2 \
+  --set crds.enabled=true

code/kubes/ircd/inspircd/inspircd.yaml

@@ -57,7 +57,7 @@ spec:
 #  annotations:
 #    metallb.universe.tf/allow-shared-ip: xinutec
 #spec:
-#  type: HostPort
+#  type: ClusterIP
 #  # Ensure that the ircd gets the actual client IP, not the load balancer IP.
 #  # externalTrafficPolicy: Local
 #  selector:

code/kubes/ircd/inspircd/upload.sh

@@ -13,4 +13,5 @@ sudo kubectl get secret -n ircd irc-tls -o json | jq -r '.data."tls.key"' | base
 
 # Copy the certs into the container and REHASH.
 sudo kubectl cp inspircd/conf/$HOST/secret "ircd/$POD:/etc/inspircd/conf/"
+sudo kubectl cp permchannels.conf "ircd/$POD:/etc/inspircd/data/"
 sudo kubectl exec --stdin --tty -n ircd "pod/$POD" -- /bin/bash -c 'kill -HUP 1'

code/kubes/ircd/net.xinutec.irc.yaml

@@ -26,7 +26,7 @@ spec:
   - host: xinutec.org
     http:
       paths:
-      - path: /.well-known
+      - path: /barfooze #/.well-known
         pathType: Prefix
         backend:
           service:
@@ -36,7 +36,7 @@ spec:
   - host: irc.xinutec.net
     http:
       paths:
-      - path: /.well-known
+      - path: /barfooze #/.well-known
         pathType: Prefix
         backend:
           service:

code/kubes/vps/toktok/toxic-deploy.sh

@@ -4,6 +4,8 @@ set -eux
 
 ssh toktok -t 'cd /src/workspace && bazel build --config=debug --config=linux-arm64-musl //toxic'
 scp toktok:/src/workspace/bazel-bin/toxic/toxic .
+gzip toxic
+scp toxic.gz hermes.vpn:
+rm toxic.gz
 ssh hermes.vpn 'rm toxic'
-scp toxic hermes.vpn:
-rm toxic
+ssh hermes.vpn 'gunzip toxic.gz'