apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ensrud.net
spec:
  secretName: wildcard-ensrud.net-tls
  renewBefore: 240h
  dnsNames:
  - "*.ensrud.net"
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer