let ghost handle https properly

deployment/deployment.yaml

@@ -24,8 +24,8 @@ spec:
             value: development
           - name: database__connection__filename
             value: /var/lib/ghost/content/data/ghost.db
-          # - name: url
-          #   value: https://anydev.info
+          - name: url
+            value: https://anydev.info
           volumeMounts:
             - name: data
               mountPath: /var/lib/ghost/content/

deployment/ingress.yaml

@@ -12,6 +12,19 @@ spec:
     services:
     - name: anydev-web
       port: 2368
+    # ghost requires x-forwarded-proto header to https since it sits behind a reverse proxy
+    middlewares:
+    - name: anydev-https-redirect
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: anydev-https-redirect
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: https