apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: gitea-tls namespace: gitea spec: secretName: gitea-tls issuerRef: name: letsencrypt-prod kind: ClusterIssuer dnsNames: - gitea.frankoslaw.top --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: gitea-tls-ingress namespace: gitea spec: entryPoints: - websecure routes: - match: Host(`gitea.frankoslaw.top`) kind: Rule services: - name: gitea port: gitea-http tls: secretName: gitea-tls