k8s: move traefik

Author: chanbengz

backend/config/traefik.yaml

@@ -1,3 +1,21 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: traefik-tls
+  namespace: default
+spec:
+  secretName: traefik-tls
+  commonName: traefik.peach.benx.dev
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  duration: 2160h
+  renewBefore: 72h
+  dnsNames:
+    - traefik.peach.benx.dev
+
+---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
@@ -6,10 +24,10 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`peach.benx.dev`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
+    - match: Host(`traefik.peach.benx.dev`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
       kind: Rule
       services:
         - name: api@internal
           kind: TraefikService
   tls:
-    secretName: peachide
+    secretName: traefik-tls