From 8cd964aa3fd381de50ab1d683db2132878c65018 Mon Sep 17 00:00:00 2001
From: "pierre.geeraert" <pierre.geeraert@betfred.com>
Date: Thu, 15 Oct 2026 15:56:20 +0100
Subject: [PATCH] try traefik UI

---
 core/ingress.tf | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/core/ingress.tf b/core/ingress.tf
index 991d220..8fbe1c6 100644
--- a/core/ingress.tf
+++ b/core/ingress.tf
@@ -28,30 +28,44 @@ resource "helm_release" "nginx_ingress" {
 
 
   set = [
+    # --- Service Configuration ---
+    {
+      name  = "service.type"
+      value = "NodePort"
+    },
+
+    # --- Web HTTP Port (80) & Redirection ---
     {
       name  = "ports.web.nodePort"
       value = "80"
     },
+    {
+      name  = "ports.web.redirectTo.port"
+      value = "websecure"
+    },
+
+    # --- Websecure HTTPS Port (443) & TLS Activation ---
     {
       name  = "ports.websecure.nodePort"
       value = "443"
     },
     {
-      name  = "service.type"
-      value = "NodePort"
+      name  = "ports.websecure.tls.enabled"
+      value = "true"
     },
-    # --- Enable Automatic Dashboard Integration ---
+
+    # --- Integrated Dashboard Settings ---
     {
       name  = "ingressRoute.dashboard.enabled"
       value = "true"
     },
     {
       name  = "ingressRoute.dashboard.matchRule"
-      value = "Host(`traefik.geeraert.eu`)" # 👈 Change this to your desired domain
+      value = "Host(`traefik.localhost`)"
     },
     {
       name  = "ingressRoute.dashboard.entryPoints"
-      value = "{web}" # Uses the standard HTTP entrypoint
+      value = "{websecure}" # Routes Dashboard over HTTPS securely
     }
   ]
 }