From 119ac6cb92ec845cbdeb569c025419ba0a050e82 Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Wed, 5 Jan 2022 21:06:12 +0100
Subject: [PATCH] Update: External Ingresses

---
 projects/drone/values/drone.yaml         |  3 ++-
 projects/gitea/values/gitea.yaml         |  1 +
 projects/nextcloud/values/nextcloud.yaml | 28 ++----------------------
 3 files changed, 5 insertions(+), 27 deletions(-)

diff --git a/projects/drone/values/drone.yaml b/projects/drone/values/drone.yaml
index 2d255d57..0f1886b9 100644
--- a/projects/drone/values/drone.yaml
+++ b/projects/drone/values/drone.yaml
@@ -24,8 +24,9 @@ service:
 ingress:
   enabled: true
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
     kubernetes.io/ingress.class: external
+    traefik.ingress.kubernetes.io/router.tls: 'true'
+    cert-manager.io/cluster-issuer: letsencrypt
     kubernetes.io/tls-acme: "true"
   hosts:
     - host: drone.nold.in
diff --git a/projects/gitea/values/gitea.yaml b/projects/gitea/values/gitea.yaml
index a77ee159..cd8c8b64 100644
--- a/projects/gitea/values/gitea.yaml
+++ b/projects/gitea/values/gitea.yaml
@@ -41,6 +41,7 @@ ingress:
     kubernetes.io/ingress.class: external
     kubernetes.io/tls-acme: "true"
     cert-manager.io/cluster-issuer: letsencrypt
+    traefik.ingress.kubernetes.io/router.tls: 'true'
   hosts:
     - host: git.nold.in
       paths:
diff --git a/projects/nextcloud/values/nextcloud.yaml b/projects/nextcloud/values/nextcloud.yaml
index bb4d9e94..af160db3 100644
--- a/projects/nextcloud/values/nextcloud.yaml
+++ b/projects/nextcloud/values/nextcloud.yaml
@@ -50,34 +50,10 @@ nextcloud:
 ingress:
   enabled: true
   annotations:
-    nginx.ingress.kubernetes.io/proxy-body-size: 4G
-    kubernetes.io/ingress.class: "external"
+    #nginx.ingress.kubernetes.io/proxy-body-size: 4G
     kubernetes.io/tls-acme: "true"
     cert-manager.io/cluster-issuer: letsencrypt
-#    nginx.ingress.kubernetes.io/server-snippet: |-
-#      server_tokens off;
-#      proxy_hide_header X-Powered-By;
-#
-#      rewrite ^/.well-known/webfinger /public.php?service=webfinger last;
-#      rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
-#      rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
-#      location = /.well-known/carddav {
-#        return 301 $scheme://$host/remote.php/dav;
-#      }
-#      location = /.well-known/caldav {
-#        return 301 $scheme://$host/remote.php/dav;
-#      }
-#      location = /robots.txt {
-#        allow all;
-#        log_not_found off;
-#        access_log off;
-#      }
-#      location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
-#        deny all;
-#      }
-#      location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
-#        deny all;
-#      }
+    traefik.ingress.kubernetes.io/router.tls: 'true'
   tls:
     - secretName: nextcloud-tls
       hosts: