From 5733c200986ed618cd125580db17a31318b3ed58 Mon Sep 17 00:00:00 2001
From: Paul Payne <paul@payne.io>
Date: Mon, 18 May 2026 04:24:21 +0000
Subject: [PATCH] feat: add repair-certificates script for managing stuck
 certificates and ACME orders

---
 cert-manager/manifest.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/cert-manager/manifest.yaml b/cert-manager/manifest.yaml
index 59fe41e..9a19ffe 100644
--- a/cert-manager/manifest.yaml
+++ b/cert-manager/manifest.yaml
@@ -11,6 +11,10 @@ defaultConfig:
   internalDomain: "{{ .cloud.internalDomain }}"
   email: "{{ .operator.email }}"
   cloudflareDomain: "{{ .cloud.baseDomain }}"
+scripts:
+  - name: repair-certificates
+    path: scripts/repair-certificates.sh
+    description: Fix stuck certificates, orphaned ACME orders, and Cloudflare DNS cleanup errors
 defaultSecrets:
   - key: cloudflareToken
 deploy: