apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: wildcard-apps-internal
  namespace: traefik
spec:
  secretName: wildcard-apps-internal-tls
  dnsNames:
    - "*.apps.internal"
  issuerRef:
    kind: ClusterIssuer
    name: homelab-ca
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: homelab
  namespace: traefik
spec:
  gatewayClassName: traefik
  listeners:
    - name: https
      protocol: HTTPS
      port: 8443
      hostname: "*.apps.internal"
      tls:
        mode: Terminate
        certificateRefs:
          - kind: Secret
            name: wildcard-apps-internal-tls
      allowedRoutes:
        namespaces:
          from: All