apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: karakeep-web-ingress namespace: karakeep annotations: external-dns.alpha.kubernetes.io/target: michaelthomson.ddns.net external-dns.alpha.kubernetes.io/cloudflare-proxied: "true" traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.tls: "true" spec: rules: - host: "karakeep.michaelthomson.dev" http: paths: - path: "/" pathType: Prefix backend: service: name: "web" port: number: 3000 tls: - hosts: - karakeep.michaelthomson.dev secretName: letsencrypt-wildcard-cert-michaelthomson.dev