Menú
Expert knowledge for TLS/SSL operations. Use when configuring certificates, debugging cert-manager, or managing Ingress TLS.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Operating the local coding agent — qwen3-coder via opencode, Claude-orchestrated, spec-driven. Use when running/troubleshooting `oc`, the ralph-qwen loop, or the laptop↔Beelink-qwen creds.
Expert knowledge for cluster backup and restore operations. Use when configuring backups, triggering manual jobs, or restoring data.
Expert knowledge for media applications (Jellyfin, Immich, Jellyseerr). Use when managing media storage, NFS mounts, or application-specific configurations.
Expert knowledge for Pi-hole and Unbound DNS operations. Use when configuring DNS, troubleshooting resolution issues, modifying adlists, or understanding the DNS data flow.
Expert knowledge for cluster observability. Use when configuring Prometheus/Grafana, Alertmanager, Uptime Kuma, or the Homepage dashboard.
Expert knowledge for Tailscale VPN operations. Use when configuring remote access, exit nodes, ACL policies, or troubleshooting VPN connectivity.
| name | cert-tls |
| description | Expert knowledge for TLS/SSL operations. Use when configuring certificates, debugging cert-manager, or managing Ingress TLS. |
| allowed-tools | Bash, Read, Grep, Glob, Edit, Write |
| Operation | MCP Tool |
|---|---|
| All certs, Ready status, expiry, challenges | get_certificate_status |
| Ingress hosts, TLS config, backend health | get_ingress_status |
| Force ExternalSecret resync | refresh_secret(namespace, name) |
*.lab.mtgibbs.dev (Wildcard)cert-managerletsencrypt-prod, letsencrypt-stagingcloudflare-api-token (Synced from 1Password)mtgibbs.dev*.lab -> 192.168.1.55 (Proxy OFF/Grey Cloud)For internal HTTPS services (like Unifi) that need re-encryption:
annotations:
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
Check Certificate Status:
MCP (preferred): get_certificate_status — shows all certs, Ready status, expiry, and pending challenges.
kubectl fallback (cluster-ops):
kubectl get certificate -n <namespace>
kubectl describe certificate <name> -n <namespace>
Look for "Ready" status or error messages.
Check Challenge:
kubectl get challengerequest -A
Check Cert-Manager Logs:
kubectl logs -n cert-manager -l app=cert-manager