From 7a70c22a464a4d3ad61d4e743d1f43d8089ea862 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Mon, 30 Mar 2026 21:39:35 -0300
Subject: [PATCH] cert-manager: force public DNS for HTTP-01 self-check

---
 infrastructure/cert-manager/helmrelease.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/infrastructure/cert-manager/helmrelease.yaml b/infrastructure/cert-manager/helmrelease.yaml
index 0a0ed220..1041dba1 100644
--- a/infrastructure/cert-manager/helmrelease.yaml
+++ b/infrastructure/cert-manager/helmrelease.yaml
@@ -27,6 +27,8 @@ spec:
     timeout: 10m
   values:
     installCRDs: true
+    extraArgs:
+      - --acme-http01-solver-nameservers=1.1.1.1:53,8.8.8.8:53
     nodeSelector:
       node-role.kubernetes.io/worker: "true"
     affinity: