# ------------------------------------------------------------------------------
# cert-manager — Helm Values
# Chart: https://charts.jetstack.io
# ------------------------------------------------------------------------------

# Install CRDs via Helm (recommended — keeps CRDs in sync with chart version)
crds:
  enabled: true

# Replicas — 1 is fine for homelab
replicaCount: 1

# Use Cloudflare DNS-01 recursive nameservers (same pattern as Traefik/lightning-lane)
# Only use 1.1.1.1 for DNS-01 challenge resolution — keeps it off internal DNS
extraArgs:
  - --dns01-recursive-nameservers-only
  - --dns01-recursive-nameservers=1.1.1.1:53

# Prometheus metrics for cinderella-castle
prometheus:
  enabled: true
  servicemonitor:
    enabled: false   # enable once Prometheus operator is in-cluster