repeat: eachDomain
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: '{{ domain_md5 }}'
  namespace: '{{ namespace }}'
spec:
  acme:
    config:
    - http01:
        ingressClass: traefik
      domains:
      - '{{ domain }}'
  dnsNames:
  - '{{ domain }}'
  issuerRef:
    kind: ClusterIssuer
    name: letsencrypt-prod
  secretName: '{{ domain_md5 }}-tls'