install cert-manager

issue certificates for public domains
temporarily disable private domains

nix/flake/kubenix/cyberchef.nix

@@ -30,22 +30,31 @@
       }];
     };
 
-    ingresses.cyberchef.spec = {
-      ingressClassName = "traefik";
+    ingresses.cyberchef = {
+      metadata.annotations."cert-manager.io/cluster-issuer" = "letsencrypt";
 
-      rules = [{
-        host = "cyberchef.kun.is";
+      spec = {
+        ingressClassName = "traefik";
 
-        http.paths = [{
-          path = "/";
-          pathType = "Prefix";
+        rules = [{
+          host = "cyberchef.kun.is";
 
-          backend.service = {
-            name = "cyberchef";
-            port.number = 80;
-          };
+          http.paths = [{
+            path = "/";
+            pathType = "Prefix";
+
+            backend.service = {
+              name = "cyberchef";
+              port.number = 80;
+            };
+          }];
         }];
-      }];
+
+        tls = [{
+          secretName = "cyberchef-tls";
+          hosts = [ "cyberchef.kun.is" ];
+        }];
+      };
     };
   };
 }