headscale ingress-private
diff --git a/core/installer/values-tmpl/certificate-issuer.yaml b/core/installer/values-tmpl/certificate-issuer.yaml
index 7cabe94..db2ed7b 100644
--- a/core/installer/values-tmpl/certificate-issuer.yaml
+++ b/core/installer/values-tmpl/certificate-issuer.yaml
@@ -2,7 +2,7 @@
 kind: HelmRelease
 metadata:
   name: certificate-issuer
-  namespace: {{ .Values.NamespacePrefix }}ingress-private
+  namespace: {{ .Global.NamespacePrefix }}ingress-private
 spec:
   chart:
     spec:
@@ -10,28 +10,28 @@
       sourceRef:
         kind: GitRepository
         name: pcloud
-        namespace: {{ .Values.Id }}
+        namespace: {{ .Global.Id }}
   dependsOn:
   - name: ingress-private
-    namespace: {{ .Values.NamespacePrefix }}ingress-private
+    namespace: {{ .Global.NamespacePrefix }}ingress-private
   interval: 1m0s
   values:
-    pcloudInstanceId: {{ .Values.Id }}
+    pcloudInstanceId: {{ .Global.Id }}
     certManager:
-      namespace: {{ .Values.PCloudEnvName }}-cert-manager
-      gandiWebhookSecretReader: {{ .Values.PCloudEnvName }}-cert-manager-webhook-gandi
+      namespace: {{ .Global.PCloudEnvName }}-cert-manager
+      gandiWebhookSecretReader: {{ .Global.PCloudEnvName }}-cert-manager-webhook-gandi
     public:
-      name: {{ .Values.Id }}-public
-      # server: https://acme-v02.api.letsencrypt.org/directory
-      server: https://acme-staging-v02.api.letsencrypt.org/directory
-      domain: {{ .Values.Domain }}
-      contactEmail: {{ .Values.ContactEmail }}
-      ingressClass: {{ .Values.PCloudEnvName }}-ingress-public
+      name: {{ .Global.Id }}-public
+      server: https://acme-v02.api.letsencrypt.org/directory
+      # server: https://acme-staging-v02.api.letsencrypt.org/directory
+      domain: {{ .Global.Domain }}
+      contactEmail: {{ .Global.ContactEmail }}
+      ingressClass: {{ .Global.PCloudEnvName }}-ingress-public
     private:
-      name: {{ .Values.Id }}-private
-      # server: https://acme-v02.api.letsencrypt.org/directory
-      server: https://acme-staging-v02.api.letsencrypt.org/directory
-      domain: p.{{ .Values.Domain }}
-      contactEmail: {{ .Values.ContactEmail }}
-      ingressClassName: {{ .Values.Id }}-ingress-private
+      name: {{ .Global.Id }}-private
+      server: https://acme-v02.api.letsencrypt.org/directory
+      # server: https://acme-staging-v02.api.letsencrypt.org/directory
+      domain: {{ .Global.PrivateDomain }}
+      contactEmail: {{ .Global.ContactEmail }}
+      ingressClassName: {{ .Global.Id }}-ingress-private
       gandiAPIToken: {{ .Values.GandiAPIToken }}