From a0976f47312b7436cf6b447f050d9a64e994b681 Mon Sep 17 00:00:00 2001
From: Roger Oriol <rogi23696@gmail.com>
Date: Tue, 10 Feb 2026 23:40:42 +0100
Subject: [PATCH] myorg ingress

---
 myorg-assistant/ingress.yaml | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/myorg-assistant/ingress.yaml b/myorg-assistant/ingress.yaml
index 2b080d3..672fcb5 100644
--- a/myorg-assistant/ingress.yaml
+++ b/myorg-assistant/ingress.yaml
@@ -1,15 +1,25 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: myorg-assistant-ingress
+  name: myorg-ingress
   namespace: default
   annotations:
+    # Use Traefik as the ingress controller (default in k3s)
     kubernetes.io/ingress.class: "traefik"
-    # Add SSL/TLS annotations if needed
-    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    # Enable SSL redirect
+    traefik.ingress.kubernetes.io/redirect-entry-point: https
+    # Optional: enable compression
+    traefik.ingress.kubernetes.io/compress: "true"
+    cert-manager.io/issuer: prod-issuer
+    cert-manager.io/issuer-kind: OriginIssuer
+    cert-manager.io/issuer-group: cert-manager.k8s.cloudflare.com
 spec:
+  tls:
+    - hosts:
+      - "*.rogi.casa"
+      secretName: rogicasa-tls
   rules:
-  - host: myorg.yourdomain.com  # Replace with your domain
+  - host: myorg.rogi.casa
     http:
       paths:
       - path: /
@@ -19,8 +29,3 @@ spec:
             name: myorg-assistant-service
             port:
               number: 8000
-  # Optional: TLS configuration
-  # tls:
-  # - hosts:
-  #   - myorg.yourdomain.com
-  #   secretName: myorg-tls-secret