From 7bc48b808357eb6e98f59a642e113e209cddf0ed Mon Sep 17 00:00:00 2001
From: Marco van Zijl <marco@mvzijl.nl>
Date: Sat, 8 Nov 2025 17:37:33 +0100
Subject: [PATCH] Use self-signed certificate in Traefik

---
 apps/cert-manager/values.yaml                   |  2 +-
 apps/traefik/templates/dashboard-httproute.yaml |  0
 apps/traefik/templates/gateway.yaml             |  0
 apps/traefik/templates/reference-grant.yaml     |  0
 apps/traefik/values.yaml                        | 10 +++++++++-
 5 files changed, 10 insertions(+), 2 deletions(-)
 delete mode 100644 apps/traefik/templates/dashboard-httproute.yaml
 delete mode 100644 apps/traefik/templates/gateway.yaml
 delete mode 100644 apps/traefik/templates/reference-grant.yaml

diff --git a/apps/cert-manager/values.yaml b/apps/cert-manager/values.yaml
index 9ac90c4..78abd09 100644
--- a/apps/cert-manager/values.yaml
+++ b/apps/cert-manager/values.yaml
@@ -80,7 +80,7 @@ cert-manager:
       kind: Certificate
       metadata:
         name: wildcard-noxxos-nl
-        namespace: cert-manager
+        namespace: traefik
       spec:
         secretName: wildcard-noxxos-nl-tls
         issuerRef:
diff --git a/apps/traefik/templates/dashboard-httproute.yaml b/apps/traefik/templates/dashboard-httproute.yaml
deleted file mode 100644
index e69de29..0000000
diff --git a/apps/traefik/templates/gateway.yaml b/apps/traefik/templates/gateway.yaml
deleted file mode 100644
index e69de29..0000000
diff --git a/apps/traefik/templates/reference-grant.yaml b/apps/traefik/templates/reference-grant.yaml
deleted file mode 100644
index e69de29..0000000
diff --git a/apps/traefik/values.yaml b/apps/traefik/values.yaml
index fd558b0..7dab8c7 100644
--- a/apps/traefik/values.yaml
+++ b/apps/traefik/values.yaml
@@ -48,6 +48,14 @@ traefik:
       web:
         namespacePolicy:
           from: All
+      websecure:
+        port: 443
+        protocol: HTTPS
+        namespacePolicy:
+          from: All
+        certificateRefs:
+          - name: wildcard-noxxos-nl-tls
+            kind: Secret
 
   extraObjects:
     - apiVersion: gateway.networking.k8s.io/v1
@@ -58,7 +66,7 @@ traefik:
       spec:
         parentRefs:
           - name: traefik-gateway
-            sectionName: web
+            sectionName: websecure
         hostnames:
           - "traefik.noxxos.nl"
         rules: