++readme

apps/nginx-certbot/README.md

@@ -1,5 +1,13 @@
 ## nginx service for getting letsencrypt certificates
 
+Get real letsencrypt certificates in IPv6 based clusters.
+
 ### Architecture
 
 * nginx/port 80 serves only the root for letsencrypt
+* nginx/port 443 crashes until the cert is there
+* A job (certbot) gets the cert
+
+## Missing bits
+
+* cronjob for renewal

apps/nginx-certbot/base/deployment.yaml

@@ -145,7 +145,7 @@ spec:
           - /usr/share/nginx/html
           - --domain
           - 'tls1.default.svc.c2.k8s.ooo'
-          - --staging
+#          - --staging
         volumeMounts:
           - name: etcletsencrypt
             mountPath: "/etc/letsencrypt"