Allow HTTP traffic for Pangolin to enable HTTP-01 ACME challenge

Changed Traefik entrypoints from 'websecure' (HTTPS-only) to
'web,websecure' (HTTP + HTTPS) to allow Let's Encrypt HTTP-01
challenge verification on port 80.

The TLS section in the ingress will still redirect HTTP to HTTPS
for normal traffic after the certificate is issued.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-08-01 10:40:52 +00:00
parent 2f1fe3dd6b
commit 125a2adc0d

View file

@ -129,7 +129,7 @@ metadata:
namespace: pangolin
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-http01"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
spec:
ingressClassName: traefik
tls: