chore(traefik): ssl redirect

deploy/prod-ovh/ingress.yaml

@@ -2,6 +2,8 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: ingress
+  annotations:
+    traefik.ingress.kubernetes.io/router.middlewares: default-prod-redirect-ssl@kubernetescrd
 
 spec:
   rules:

deploy/prod-ovh/kustomization.yaml

@@ -34,7 +34,8 @@ resources:
 
 - statefulset-gitea.yaml
 - svc-gitea.yaml
-- ingress-route-gitea-ssh.yaml
+- traefik-ingress-route-gitea-ssh.yaml
+- traefik-middleware-ssl-redirect.yaml
 
 - statefulset-radicale.yaml
 - svc-radicale.yaml

deploy/prod-ovh/traefik-middleware-ssl-redirect.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: redirect-ssl
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true