apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: vaultwarden namespace: vaultwarden annotations: haproxy-ingress.github.io/ssl-redirect: "true" spec: ingressClassName: haproxy rules: - host: warden.strudelline.net http: paths: - path: / pathType: Prefix backend: service: name: vaultwarden port: number: 80 tls: - hosts: - warden.strudelline.net secretName: wildcard-tls