---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: production-https-ingress
  namespace: production
  annotations:
    ingress.kubernetes.io/ssl-redirect: "true"
    acme.cert-manager.io/http01-ingress-class: traefik
    cert-manager.io/issuer: letsencrypt-production

spec:
  rules:
    - host: bullish.codingcoffee.me
      http:
        paths:
          - backend:
              serviceName: bullish-frontend
              servicePort: 80
    - host: api.bullish.codingcoffee.me
      http:
        paths:
          - backend:
              serviceName: bullish-backend
              servicePort: 8000

  tls:
    - hosts:
        - bullish.codingcoffee.me
        - api.bullish.codingcoffee.me
      secretName: production-tls-cert

...