@TodePond@mas.to we joke but there is magic you can invoke that lets cert-manager use the same certs for internal and external addresses but it only works with cloudflare's ssl :( to do it ourselves involves triple-home dns and other shit smh