feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

gitea/k8s/ingressroute.yaml

@@ -1,19 +1,19 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: gitea-dev
+  name: gitea-prod
   namespace: gitea
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`gitea.gigaforust.internal`)
+  - match: Host(`gitea.forust.xyz`)
     kind: Rule
     services:
     - name: gitea-service
       port: 3000
   tls:
-    secretName: local-tls
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -35,19 +35,19 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: gitea-prod
+  name: gitea-dev
   namespace: gitea
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`gitea.forust.xyz`)
+  - match: Host(`gitea.gigaforust.internal`)
     kind: Rule
     services:
     - name: gitea-service
       port: 3000
   tls:
-    {}
+    secretName: local-tls
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -64,7 +64,7 @@ spec:
     - name: gitea-service
       port: 3000
   tls:
-    {}
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRouteTCP