# Traefik configuration — global HTTP→HTTPS redirect
# Applied via k3s HelmChartConfig (managed outside of Helm provider)

resource "kubernetes_manifest" "traefik_config" {
  field_manager {
    force_conflicts = true
  }

  manifest = {
    apiVersion = "helm.cattle.io/v1"
    kind       = "HelmChartConfig"
    metadata = {
      name      = "traefik"
      namespace = "kube-system"
    }
    spec = {
      valuesContent = <<-YAML
        ports:
          web:
            redirectTo:
              port: websecure
          minecraft:
            port: 25565
            expose:
              default: true
            exposedPort: 25565
            protocol: TCP
          voicechat:
            port: 24454
            expose:
              default: true
            exposedPort: 24454
            protocol: UDP
      YAML
    }
  }
}