tls for all

apps/adguard/base/adguard-ingress.yaml

@@ -6,11 +6,11 @@ metadata:
 spec:
   entryPoints:
     - websecure-front
-    - web-local
     - websecure-local
   routes:
   - match: Host(`adguard.steffenillium.de`) || Host(`dns.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: adguard-service
       port: http
@@ -23,11 +23,11 @@ metadata:
   namespace: adguard
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`adguard-init.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: adguard-service
       port: http-initial

apps/gitea/base/gitea-ingress.yaml

@@ -11,6 +11,7 @@ spec:
   routes:
   - match: Host(`gitea.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: gitea
       port: http

apps/paperless/base/paperless-ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: paperless
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`documents.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: paperless-service
       port: http
@@ -19,6 +19,7 @@ kind: IngressRoute
 metadata:
   name: paperless-ingress-front
   namespace: paperless
+  tls: {}
 spec:
   entryPoints:
     - websecure-front

apps/vaultwarden/base/vaultwarden-ingress.yaml

@@ -6,11 +6,11 @@ metadata:
 spec:
   entryPoints:
     - websecure-front
-    - web-local
     - websecure-local
   routes:
   - match: Host(`vault.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: vaultwarden
       port: 80

infrastructure/0-argo-cd-ui-ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: argocd
 spec:
   entryPoints:
-    - web-local
+  - websecure-local
-    - websecure-local
   routes:
   - match: Host(`argocd.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: argocd-server
       port: 80

infrastructure/03-traefik/base/networking/ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: traefik
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`traefik.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: api@internal
       kind: TraefikService

infrastructure/03-traefik/foreign/adguard/ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: traefik
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`adguard.steffenillium.de`) || Host(`dns.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: adguard-service
       port: http

infrastructure/03-traefik/foreign/fritz/ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: traefik
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`fritz.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: fritz-service
       port: http

infrastructure/03-traefik/foreign/home-assistant/ingress.yaml

@@ -6,11 +6,11 @@ metadata:
 spec:
   entryPoints:
     - websecure-front
-    - web-local
     - websecure-local
   routes:
   - match: Host(`home.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: home-assistant
       port: http

infrastructure/03-traefik/foreign/immich/ingress.yaml

@@ -5,12 +5,12 @@ metadata:
   namespace: traefik
 spec:
   entryPoints:
-    - web-local
     - websecure-local
     - websecure-front
   routes:
   - match: Host(`photos.steffenillium.de`) || Host(`immich.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: immich
       port: http

infrastructure/03-traefik/foreign/wgui/ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: traefik
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`wgui.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: wgui
       port: http

infrastructure/04-rook-ceph/base/ingress.yaml

@@ -5,11 +5,11 @@ metadata:
   namespace: rook-ceph
 spec:
   entryPoints:
-    - web-local
     - websecure-local
   routes:
   - match: Host(`rook.steffenillium.de`)
     kind: Rule
+    tls: {}
     services:
     - name: rook-ceph-mgr-dashboard
       port: 7000

projects/website/base/website-ingress.yaml

@@ -6,7 +6,6 @@ metadata:
 spec:
   entryPoints:
     - websecure-front
-    - web-local
     - websecure-local
   routes:
   - match: Host(`www.steffenillium.de`) || Host(`steffenillium.de`)