feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

nextcloud/k8s/ingress.yaml

@@ -2,13 +2,13 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: nextcloud-dev
+  name: nextcloud-prod
   namespace: nextcloud
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nextcloud.gigaforust.internal`)
+  - match: Host(`nextcloud.forust.xyz`)
     kind: Rule
     middlewares:
     - name: nextcloud-chain@file
@@ -16,7 +16,7 @@ spec:
     - name: nextcloud-apache
       port: 11000
   tls:
-    secretName: local-tls
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -40,13 +40,13 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: nextcloud-prod
+  name: nextcloud-dev
   namespace: nextcloud
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`nextcloud.forust.xyz`)
+  - match: Host(`nextcloud.gigaforust.internal`)
     kind: Rule
     middlewares:
     - name: nextcloud-chain@file
@@ -54,19 +54,19 @@ spec:
     - name: nextcloud-apache
       port: 11000
   tls:
-    {}
+    secretName: local-tls
 ---
 # Nextcloud AIO
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: naio-dev
+  name: naio-prod
   namespace: nextcloud
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`naio.gigaforust.internal`)
+  - match: Host(`naio.forust.xyz`)
     kind: Rule
     services:
     - name: nextcloud-aio
@@ -74,7 +74,7 @@ spec:
       scheme: https
       serversTransport: insecureTransport@file
   tls:
-    secretName: local-tls
+    certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
@@ -98,13 +98,13 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: naio-prod
+  name: naio-dev
   namespace: nextcloud
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`naio.forust.xyz`)
+  - match: Host(`naio.gigaforust.internal`)
     kind: Rule
     services:
     - name: nextcloud-aio
@@ -112,4 +112,4 @@ spec:
       scheme: https
       serversTransport: insecureTransport@file
   tls:
-    {}
+    secretName: local-tls