myorg ingress

myorg-assistant/ingress.yaml

@@ -1,15 +1,25 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: myorg-assistant-ingress
+  name: myorg-ingress
   namespace: default
   annotations:
+    # Use Traefik as the ingress controller (default in k3s)
     kubernetes.io/ingress.class: "traefik"
-    # Add SSL/TLS annotations if needed
-    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    # Enable SSL redirect
+    traefik.ingress.kubernetes.io/redirect-entry-point: https
+    # Optional: enable compression
+    traefik.ingress.kubernetes.io/compress: "true"
+    cert-manager.io/issuer: prod-issuer
+    cert-manager.io/issuer-kind: OriginIssuer
+    cert-manager.io/issuer-group: cert-manager.k8s.cloudflare.com
 spec:
+  tls:
+    - hosts:
+      - "*.rogi.casa"
+      secretName: rogicasa-tls
   rules:
-  - host: myorg.yourdomain.com  # Replace with your domain
+  - host: myorg.rogi.casa
     http:
       paths:
       - path: /
@@ -19,8 +29,3 @@ spec:
             name: myorg-assistant-service
             port:
               number: 8000
-  # Optional: TLS configuration
-  # tls:
-  # - hosts:
-  #   - myorg.yourdomain.com
-  #   secretName: myorg-tls-secret