chore(k8s): router rewrite

- returned to Host matcher instead of Hostregexp
- switched dockercompose labels to letsencrypt
- renamed DoH route

headscale/k8s/ingress.yaml

@@ -7,7 +7,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^hs\.forust\.xyz$`)
+    - match: Host(`hs.forust.xyz`)
       kind: Rule
       services:
         - name: headscale-server-external
@@ -40,7 +40,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^hs\.forust\.xyz$`) && PathPrefix(`/admin`)
+    - match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
       kind: Rule
       middlewares:
         - name: security-chain@file
@@ -75,13 +75,15 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^hs\.forust\.xyz$`) && PathPrefix(`/metrics`)
+    - match: Host(`hs.forust.xyz`) && PathPrefix(`/metrics`)
       kind: Rule
       services:
         - name: headscale-server-external
           port: 9090
   tls:
     certResolver: letsencrypt
+    domains:
+      - main: hs.forust.xyz
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -97,5 +99,3 @@ spec:
       services:
         - name: headscale-server-external
           port: 9090
-
-