Worked on the major/selfhosted repository to automate TLS certificate management and enhance security for amajor.cloud. Leveraged Kubernetes, Helm, and Infrastructure as Code practices to implement cert-manager with Let’s Encrypt and Porkbun DNS challenges, configuring a ClusterIssuer, renewal policies, and updating deployment scaffolding. Improved deployment reliability by correcting cert-manager installation order and enabling RBAC for Porkbun webhook CRDs, ensuring smooth certificate provisioning. Hardened Nginx ingress security by blocking AI crawlers and bots using a server-snippet approach. All changes were delivered in YAML, focusing on reducing manual maintenance, improving certificate renewal reliability, and strengthening the cluster’s overall security posture.