apiVersion: traefik.io/v1alpha1 kind: Middleware metadata: name: websocket spec: headers: customRequestHeaders: X-Forwarded-Proto: "https" # enable websockets Upgrade: "websocket" --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: ntfy-ingressroute spec: entryPoints: - websecure routes: - match: Host(`ntfy.kluster.moll.re`) kind: Rule services: - name: ntfy port: 80 # passHostHeader: true middlewares: - name: websocket tls: certResolver: default-tls