# values.yaml
ingress:
  enabled: true
  ingressClassName: nginx
  annotations:
    # AUTOMATED TLS FIX: Triggers cert-manager to provision the certificate
    cert-manager.io/cluster-issuer: "letsencrypt-production"
    # THE 502 FIX: Bridges to Portainer's unencrypted HTTP web port cleanly
    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
  hosts:
    - host: portainer.needlestack.boo
      paths:
        - path: /
          pathType: Prefix
  # AUTOMATED TLS FIX: Instructs NGINX where to store the secret
  tls:
    - secretName: portainer-tls-secret
      hosts:
        - portainer.needlestack.boo
service:
  type: ClusterIP
tls:
  # Leave this false inside the values block so the pod doesn't look for custom internal certs
  force: false