use internal .lab instead of failing duckdns.org

plausible/iac/providers.tf

@@ -8,7 +8,7 @@ terraform {
 }
 
 provider "vault" {
-  address = "https://vault.arcodange.duckdns.org"
+  address = "https://vault.arcodange.lab"
   auth_login_jwt { # TERRAFORM_VAULT_AUTH_JWT environment variable
     mount = "gitea_jwt"
     role  = "gitea_cicd_plausible"

plausible/kustomization.yaml

@@ -21,9 +21,9 @@ patches:
         value:
           certResolver: letsencrypt
           domains:
-          - main: arcodange.duckdns.org
+          - main: arcodange.lab
             sans:
-            - analytics.arcodange.duckdns.org
+            - analytics.arcodange.lab
 
 resources:
   - resources/vaultauth.yaml

plausible/plausibleValues.yaml

@@ -58,7 +58,7 @@ ingressRoute:
   # -- List of [entry points](https://doc.traefik.io/traefik/routing/routers/#entrypoints) on which the ingress route will be available.
   entryPoints: [websecure]
   # -- [Matching rule](https://doc.traefik.io/traefik/routing/routers/#rule) for the underlying router.
-  rule: Host(`analytics.arcodange.duckdns.org`)
+  rule: Host(`analytics.arcodange.lab`)
   # -- List of [middleware objects](https://doc.traefik.io/traefik/routing/providers/kubernetes-crd/#kind-middleware) for the ingress route.
   middlewares:
     - name: localIp@file

plausible/resources/configmap.yaml

@@ -9,7 +9,7 @@ data:
   DB_PORT: !!str 5432
   DB_NAME: plausible
 
-  BASE_URL: https://analytics.arcodange.duckdns.org
+  BASE_URL: https://analytics.arcodange.lab
 
   CLICKHOUSE_DATABASE_URL: http://plausible:plausiblearcodange@clickhouse.tools:8123/plausible