apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: haos-certificate namespace: external-services spec: secretName: haos-skrd-fun-tls dnsNames: - "haos.skrd.fun" issuerRef: name: letsencrypt-prod kind: ClusterIssuer --- kind: Service apiVersion: v1 metadata: name: haos namespace: external-services spec: type: ExternalName ports: - port: 8123 externalName: 192.168.3.6 --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: haos-ingress namespace: external-services annotations: traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd spec: ingressClassName: traefik rules: - host: haos.skrd.fun http: paths: - path: / pathType: Prefix backend: service: name: haos port: number: 8123 tls: - secretName: haos-skrd-fun-tls