kind: Ingress metadata: name: headscale annotations: cert-manager.io/cluster-issuer: letsencrypt-staging traefik.ingress.kubernetes.io/router.tls: "true" spec: tls: - hosts: - $(PUBLIC_HOSTNAME) secretName: staging-cert