From f3f14d4fb92088cf133c4e2ca4c00f00eae45b62 Mon Sep 17 00:00:00 2001
From: szymi <szymi@szymiserver.szymi.ddns.net>
Date: Mon, 12 Jan 2026 23:23:14 +0100
Subject: [PATCH] cicd: add TLS with Let's Encrypt

---
 deployment/ingress.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/deployment/ingress.yaml b/deployment/ingress.yaml
index bd684e9..dd1f281 100644
--- a/deployment/ingress.yaml
+++ b/deployment/ingress.yaml
@@ -4,9 +4,13 @@ metadata:
   name: drawio
   namespace: drawio
   annotations:
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: nginx
+  tls:
+    - hosts:
+        - drawio.szymi.ddns.net
+      secretName: drawio-tls
   rules:
   - host: drawio.szymi.ddns.net
     http: