Add: Ingress External labelSelector

projects/core/values/ingress-external.yaml

@@ -5,6 +5,8 @@ ingressClass:
 providers:
   kubernetesCRD:
     ingressClass: external
+  kubernetesIngress:
+    labelSelector: environment=external
 
 globalArguments: []
 

projects/drone/values/drone.yaml

@@ -23,6 +23,8 @@ service:
 
 ingress:
   enabled: true
+  labels:
+    environment: external
   annotations:
 #    kubernetes.io/ingress.class: ingress-external-traefik
     traefik.ingress.kubernetes.io/router.tls: 'true'

projects/gitea/values/gitea.yaml

@@ -37,6 +37,8 @@ service:
 
 ingress:
   enabled: true
+  labels:
+    environment: external
   annotations:
 #    kubernetes.io/ingress.class: ingress-external-traefik
     kubernetes.io/tls-acme: "true"

projects/nextcloud/values/nextcloud.yaml

@@ -49,6 +49,8 @@ nextcloud:
              
 ingress:
   enabled: true
+  labels:
+    environment: external
   annotations:
     #nginx.ingress.kubernetes.io/proxy-body-size: 4G
     kubernetes.io/tls-acme: "true"

resources/manifests/traefik-tls.yaml

@@ -0,0 +1,15 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: TLSOption
+metadata:
+  name: default
+  namespace: kube-system
+spec:
+  minVersion: VersionTLS12
+  sniStrict: true
+  cipherSuites:
+    - TLS_AES_128_GCM_SHA256
+    - TLS_AES_256_GCM_SHA384
+    - TLS_CHACHA20_POLY1305_SHA256
+    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384