From 8a3a892cbdacea932c76232c31591e2933ebd61f Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 14 Jul 2026 14:01:14 -0700
Subject: [PATCH] Fix: Inject homelab-ca cert into ArgoCD repo-server

- Mount homelab-ca-secret for TLS verification
- Allows repo-server to reach forgejo.riotpiao.homelab.com
- Fixes x509 certificate verification error
---
 terraform/argocd-bootstrap.tf | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/terraform/argocd-bootstrap.tf b/terraform/argocd-bootstrap.tf
index 4e47af7..c472b14 100644
--- a/terraform/argocd-bootstrap.tf
+++ b/terraform/argocd-bootstrap.tf
@@ -44,6 +44,21 @@ resource "helm_release" "argocd" {
           enabled     = true
           minReplicas = 2
         }
+        volumes = [
+          {
+            name = "homelab-ca"
+            secret = {
+              secretName = "homelab-ca-secret"
+            }
+          }
+        ]
+        volumeMounts = [
+          {
+            name      = "homelab-ca"
+            mountPath = "/etc/ssl/certs/homelab-ca.crt"
+            subPath   = "tls.crt"
+          }
+        ]
       }
       controller = {
         replicas = 2