infrastructure/dependencies/traefik-config.yaml

# scp dependencies/traefik-config.yaml root@[ip]:/var/lib/rancher/k3s/server/manifests/traefik-config.yaml
apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    hostNetwork: true
    ports:
      websecure:
        tls:
          enabled: true
      web:
        redirectTo:
          port: websecure
    deployment:
      securityContext:
        runAsNonRoot: false
        runAsGroup: 0
        runAsUser: 0
      initContainers:
        - name: volume-permissions
          image: traefik
          command:
            [
              "sh",
              "-c",
              "touch /data/acme.json; chown 65532 /data/acme.json; chmod -v 600 /data/acme.json",
            ]
          securityContext:
            runAsNonRoot: false
            runAsGroup: 0
            runAsUser: 0
          volumeMounts:
            - name: traefik
              mountPath: /data
    providers:
      kubernetesCRD:
        allowCrossNamespace: true
    persistence:
      enabled: true
      name: traefik
      accessMode: ReadWriteOnce
      size: 128Mi
      storageClass: longhorn
      path: /data
      annotations:
        app: traefik
    certResolvers:
      letsencrypt:
        email: help@nocodelytics.com
        httpChallenge:
          entryPoint: "web"
        storage: /data/acme.json