lawndale is skver

gitea.tf

@@ -22,8 +22,8 @@ resource "helm_release" "this" {
           "kubernetes.io/ingress.class"                             = "traefik"
           "traefik.ingress.kubernetes.io/router.entrypoints"        = "websecure"
           "traefik.ingress.kubernetes.io/router.tls"                = "true"
-          "traefik.ingress.kubernetes.io/router.tls.certresolver"   = "acme-thomasklein-me"
           "traefik.ingress.kubernetes.io/router.tls.domains.0.main" = local.ingress_domain
+          "cert-manager.io/cluster-issuer"                          = "acme-thomasklein-me"
         }
         hosts = [
           {
@@ -36,6 +36,21 @@ resource "helm_release" "this" {
             ]
           }
         ]
+        tls = [
+          {
+            secretName = "git-thomasklein-me-tls"
+            hosts = [
+              local.ingress_domain
+            ]
+          }
+        ]
+      }
+    }),
+    jsonencode({
+      service = {
+        ssh = {
+          type = "LoadBalancer"
+        }
       }
     }),
     jsonencode({

ssh-ingresstcproute.tf

@@ -1,26 +0,0 @@
-resource "kubernetes_manifest" "ingress_tcp_route" {
-    manifest = {
-        apiVersion = "traefik.containo.us/v1alpha1"
-        kind = "IngressRouteTCP"
-        metadata = {
-            name = "gitea-ssh"
-            namespace = kubernetes_namespace.this.metadata.0.name
-        }
-        spec = {
-            entryPoints = [
-                "gitssh",
-            ]
-            routes: [
-                {
-                    match = "HostSNI(`*`)"
-                    services = [
-                        {
-                            name = "gitea-ssh"
-                            port = 22
-                        }
-                    ]
-                }
-            ]
-        }
-    }
-}