traefik: add default cert

system-apps/traefik/values.yaml

@@ -36,6 +36,10 @@ traefik:
         periodSeconds: 10
         successThreshold: 1
         timeoutSeconds: 1
+  tlsStore:
+    default:
+      defaultCertificate:
+        secretName: cert-dubyatp-xyz
   providers:
     file:
       enabled: true
@@ -70,4 +74,14 @@ traefik:
       - secretKey: 7e903099-1fbe-48d1-93ac-0922859851a9.json
         remoteRef:
           key: traefik
-          property: cloudflare-token
+          property: cloudflare-token
+  - apiVersion: v1
+    kind: Secret
+    metadata:
+      name: cert-dubyatp-xyz
+      annotations:
+        replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+        replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+    data:
+      tls.crt: ""
+      tls.key: ""