certmanager

media/jellyfin.yaml

@@ -92,8 +92,14 @@ kind: Ingress
 metadata:
   name: jellyfin-ingress
   namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: haproxy
+  tls:
+  - secretName: jellyfin-ingress
+    hosts:
+    - jf.ntwl.xyz
   rules:
     - host: jf.ntwl.xyz
       http:
@@ -106,3 +112,26 @@ spec:
             path: /
             pathType: Prefix
 
+---
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: jellyfin-lan-ingress
+  namespace: media
+  annotations:
+    haproxy.org/ssl-redirect: "false"
+    haproxy.org/ssl-certificate: "default/tls-secret"
+spec:
+  ingressClassName: haproxy
+  rules:
+    - host: jfl.ntwl.xyz
+      http:
+        paths:
+          - backend:
+              service:
+                name: jellyfin
+                port:
+                  name: web
+            path: /
+            pathType: Prefix

media/jellyseerr.yaml

@@ -76,8 +76,15 @@ kind: Ingress
 metadata:
   name: jellyseerr-ingress
   namespace: media
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
   ingressClassName: haproxy
+  tls:
+  - secretName: jellyseerr-ingress
+    hosts:
+    - jellyseerr.ntwl.xyz
+    - get.ntwl.xyz
   rules:
     - host: jellyseerr.ntwl.xyz
       http:
@@ -89,3 +96,13 @@ spec:
                   name: web
             path: /
             pathType: Prefix
+    - host: get.ntwl.xyz
+      http:
+        paths:
+          - backend:
+              service:
+                name: jellyseerr
+                port:
+                  name: web
+            path: /
+            pathType: Prefix