traefik: lets encrypt

traefik-values.yaml

@@ -0,0 +1,14 @@
+providers:
+  kubernetesCRD:
+    enabled: true
+  kubernetesIngress:
+    enabled: true
+
+additionalArguments:
+  - "--certificatesresolvers.letsencrypt.acme.email=certs@asxp.io"
+  - "--certificatesresolvers.letsencrypt.acme.storage=/data/acme.json"
+  - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
+
+persistence:
+  enabled: true
+  size: 128Mi

traefik.tf

@@ -6,16 +6,7 @@ resource "helm_release" "traefik" {
   chart            = "traefik"
   version          = "35.0.1"
 
-  set = [
-    {
-      name  = "providers.kubernetesCRD.enabled"
-      value = "true"
-    },
-    {
-      name  = "providers.kubernetesIngress.enabled"
-      value = "true"
-    }
-  ]
+  values = [file("traefik-values.yaml")]
 
   depends_on = [module.kubernetes]
 }