From e79c1d0bc6d8f166a85e0a255b5707e8877d1118 Mon Sep 17 00:00:00 2001
From: Sergei Poljanski <me@asxp.io>
Date: Fri, 20 Mar 2026 22:17:56 +0300
Subject: [PATCH] traefik: lets encrypt

---
 traefik-values.yaml | 14 ++++++++++++++
 traefik.tf          | 11 +----------
 2 files changed, 15 insertions(+), 10 deletions(-)
 create mode 100644 traefik-values.yaml

diff --git a/traefik-values.yaml b/traefik-values.yaml
new file mode 100644
index 0000000..cdfa97a
--- /dev/null
+++ b/traefik-values.yaml
@@ -0,0 +1,14 @@
+providers:
+  kubernetesCRD:
+    enabled: true
+  kubernetesIngress:
+    enabled: true
+
+additionalArguments:
+  - "--certificatesresolvers.letsencrypt.acme.email=certs@asxp.io"
+  - "--certificatesresolvers.letsencrypt.acme.storage=/data/acme.json"
+  - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
+
+persistence:
+  enabled: true
+  size: 128Mi
diff --git a/traefik.tf b/traefik.tf
index b08fa2f..686fee5 100644
--- a/traefik.tf
+++ b/traefik.tf
@@ -6,16 +6,7 @@ resource "helm_release" "traefik" {
   chart            = "traefik"
   version          = "35.0.1"
 
-  set = [
-    {
-      name  = "providers.kubernetesCRD.enabled"
-      value = "true"
-    },
-    {
-      name  = "providers.kubernetesIngress.enabled"
-      value = "true"
-    }
-  ]
+  values = [file("traefik-values.yaml")]
 
   depends_on = [module.kubernetes]
 }