Change: Ingress External selector & tlsoptions

projects/ingress-external/values/ingress-external.yaml

@@ -6,7 +6,12 @@ providers:
   kubernetesCRD:
     ingressClass: external
 
-globalArguments: []
+kubernetesIngress:
+  labelSelector: environment=external
+  namespaces:
+  - drone
+  - nextcloud
+  - gitea
 
 ports:
   web:
@@ -15,6 +20,28 @@ ports:
     tls:
       enabled: true
 
+globalArguments: []
+additionalArguments:
+  - "--providers.kubernetesingress.ingressclass=ingress-external"
+
+ingressRoute:
+  dashboard:
+    enabled: false
+
+tlsOptions:
+  default:
+    preferServerCipherSuites: true
+    minVersion: VersionTLS12
+    sniStrict: true
+    cipherSuites:
+      - TLS_AES_128_GCM_SHA256
+      - TLS_AES_256_GCM_SHA384
+      - TLS_CHACHA20_POLY1305_SHA256
+      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+
+
 service:
   enabled: true
   type: LoadBalancer

resources/manifests/traefik-tls.yaml

@@ -1,15 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: TLSOption
-metadata:
-  name: default
-  namespace: kube-system
-spec:
-  minVersion: VersionTLS12
-  sniStrict: true
-  cipherSuites:
-    - TLS_AES_128_GCM_SHA256
-    - TLS_AES_256_GCM_SHA384
-    - TLS_CHACHA20_POLY1305_SHA256
-    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
-    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384