From 2043ef4ac44d0d4c68cc2946fd51cf57cdbccee8 Mon Sep 17 00:00:00 2001
From: Ashwin Kumar Sivakumar <ashwin@traceworks.in>
Date: Sat, 18 Apr 2026 01:00:43 +0530
Subject: [PATCH] fix: add TLS for admin/api ingresses

---
 apps/nxtgauge-admin-solid/base/ingress.yaml  | 7 +++++++
 apps/nxtgauge-backend-rust/base/ingress.yaml | 7 +++++++
 2 files changed, 14 insertions(+)

diff --git a/apps/nxtgauge-admin-solid/base/ingress.yaml b/apps/nxtgauge-admin-solid/base/ingress.yaml
index 315b27d..31ca7f0 100644
--- a/apps/nxtgauge-admin-solid/base/ingress.yaml
+++ b/apps/nxtgauge-admin-solid/base/ingress.yaml
@@ -3,8 +3,15 @@ kind: Ingress
 metadata:
   name: nxtgauge-admin-solid
   namespace: nxtgauge
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
 spec:
   ingressClassName: traefik
+  tls:
+    - hosts:
+        - admin.nxtgauge.com
+      secretName: admin-tls
   rules:
     - host: admin.nxtgauge.com
       http:
diff --git a/apps/nxtgauge-backend-rust/base/ingress.yaml b/apps/nxtgauge-backend-rust/base/ingress.yaml
index e4743fd..16f60f3 100644
--- a/apps/nxtgauge-backend-rust/base/ingress.yaml
+++ b/apps/nxtgauge-backend-rust/base/ingress.yaml
@@ -3,8 +3,15 @@ kind: Ingress
 metadata:
   name: nxtgauge-backend-rust
   namespace: nxtgauge
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
 spec:
   ingressClassName: traefik
+  tls:
+    - hosts:
+        - api.nxtgauge.com
+      secretName: api-tls
   rules:
     - host: api.nxtgauge.com
       http: