personal/radex/demo: +tls

Change-Id: Ib10633b90256bbe15131326aa69e19fdc6ef21e3
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1568

personal/radex/demo/prod.jsonnet

@@ -39,7 +39,15 @@ local kube = import "../../../kube/kube.libsonnet";
     },
 
     ingress: top.ns.Contain(kube.Ingress(cfg.name)) {
+        metadata+: {
+            annotations+: {
+                "kubernetes.io/tls-acme": "true",
+                "cert-manager.io/cluster-issuer": "letsencrypt-prod",
+                "nginx.ingress.kubernetes.io/proxy-body-size": "0",
+            },
+        },
         spec+: {
+            tls: [ { hosts: [ cfg.domain ], secretName: cfg.name + "-tls" } ],
             rules: [
                 {
                     host: cfg.domain,