this time at the right position

apps/adguard/base/adguard-ingress.yaml

@@ -5,12 +5,11 @@ metadata:
   namespace: adguard
 spec:
   entryPoints:
-    - websecure-front
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`adguard.steffenillium.de`) || Host(`dns.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: adguard-service
       port: http
@@ -24,10 +23,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`adguard-init.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: adguard-service
       port: http-initial

apps/gitea/base/gitea-ingress.yaml

@@ -8,10 +8,10 @@ spec:
     - websecure-front
     - web-local
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`gitea.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: gitea
       port: http

apps/nextcloud/base/ingress.yaml

@@ -7,6 +7,7 @@ spec:
   entryPoints:
     - websecure-front
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`newcloud.steffenillium.de`)
     kind: Rule
@@ -15,4 +16,3 @@ spec:
       port: 80
     middlewares:
     - name: redirect
-  tls: {}

apps/paperless/base/paperless-ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`documents.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: paperless-service
       port: http
@@ -19,10 +19,10 @@ kind: IngressRoute
 metadata:
   name: paperless-ingress-front
   namespace: paperless
-  tls: {}
 spec:
   entryPoints:
     - websecure-front
+  tls: {}
   routes:
   - match: Host(`documents.steffenillium.de`)
     kind: Rule

apps/vaultwarden/base/vaultwarden-ingress.yaml

@@ -7,10 +7,10 @@ spec:
   entryPoints:
     - websecure-front
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`vault.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: vaultwarden
       port: 80

infrastructure/0-argo-cd-ui-ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
   - websecure-local
+  tls: {}
   routes:
   - match: Host(`argocd.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: argocd-server
       port: 80

infrastructure/03-traefik/base/networking/ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`traefik.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: api@internal
       kind: TraefikService

infrastructure/03-traefik/foreign/adguard/ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`adguard.steffenillium.de`) || Host(`dns.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: adguard-service
       port: http

infrastructure/03-traefik/foreign/fritz/ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`fritz.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: fritz-service
       port: http

infrastructure/03-traefik/foreign/home-assistant/ingress.yaml

@@ -7,10 +7,10 @@ spec:
   entryPoints:
     - websecure-front
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`home.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: home-assistant
       port: http

infrastructure/03-traefik/foreign/immich/ingress.yaml

@@ -7,10 +7,10 @@ spec:
   entryPoints:
     - websecure-local
     - websecure-front
+  tls: {}
   routes:
   - match: Host(`photos.steffenillium.de`) || Host(`immich.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: immich
       port: http

infrastructure/03-traefik/foreign/wgui/ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`wgui.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: wgui
       port: http

infrastructure/04-rook-ceph/base/ingress.yaml

@@ -6,10 +6,10 @@ metadata:
 spec:
   entryPoints:
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`rook.steffenillium.de`)
     kind: Rule
-    tls: {}
     services:
     - name: rook-ceph-mgr-dashboard
       port: 7000

projects/website/base/website-ingress.yaml

@@ -7,10 +7,10 @@ spec:
   entryPoints:
     - websecure-front
     - websecure-local
+  tls: {}
   routes:
   - match: Host(`www.steffenillium.de`) || Host(`steffenillium.de`) 
     kind: Rule
-    tls: {}
     services:
     - name: website
       port: http