From 0d0f12af7775e4f97e25459f5d21751b3a00b0c6 Mon Sep 17 00:00:00 2001
From: AB <ab@hexor.cy>
Date: Mon, 1 Jun 2026 13:08:07 +0300
Subject: [PATCH] Fixed https-middleware and gitea. dropped authentik

---
 k8s/apps/gitea/ingress.yaml                       |  2 +-
 k8s/core/authentik/kustomization.yaml             |  1 -
 k8s/core/kube-system-custom/https-middleware.yaml | 10 ++++++++++
 k8s/core/kube-system-custom/kustomization.yaml    |  1 +
 4 files changed, 12 insertions(+), 2 deletions(-)
 create mode 100644 k8s/core/kube-system-custom/https-middleware.yaml

diff --git a/k8s/apps/gitea/ingress.yaml b/k8s/apps/gitea/ingress.yaml
index 3ae2712..2c816e2 100644
--- a/k8s/apps/gitea/ingress.yaml
+++ b/k8s/apps/gitea/ingress.yaml
@@ -4,11 +4,11 @@ kind: Ingress
 metadata:
   name: gitea-tls-ingress
   annotations:
-    ingressClassName: traefik
     cert-manager.io/cluster-issuer: letsencrypt
     traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
     acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
+  ingressClassName: traefik
   rules:
     - host: gt.hexor.cy
       http:
diff --git a/k8s/core/authentik/kustomization.yaml b/k8s/core/authentik/kustomization.yaml
index 578b67d..13e38ae 100644
--- a/k8s/core/authentik/kustomization.yaml
+++ b/k8s/core/authentik/kustomization.yaml
@@ -4,7 +4,6 @@ kind: Kustomization
 resources:
   - app.yaml
   - external-secrets.yaml
-  - https-middleware.yaml
   - outpost-selector-fix.yaml
 # - worker-restart.yaml
 
diff --git a/k8s/core/kube-system-custom/https-middleware.yaml b/k8s/core/kube-system-custom/https-middleware.yaml
new file mode 100644
index 0000000..8be1df1
--- /dev/null
+++ b/k8s/core/kube-system-custom/https-middleware.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: https-redirect
+  namespace: kube-system
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
diff --git a/k8s/core/kube-system-custom/kustomization.yaml b/k8s/core/kube-system-custom/kustomization.yaml
index 4b5a177..bef00ee 100644
--- a/k8s/core/kube-system-custom/kustomization.yaml
+++ b/k8s/core/kube-system-custom/kustomization.yaml
@@ -5,6 +5,7 @@ resources:
   - app.yaml
   - nfs-storage.yaml
   - coredns-internal-resolve.yaml
+  - https-middleware.yaml
 
 helmCharts:
   - name: csi-driver-nfs