apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: adguard-tls-ingress
spec:
  entryPoints:
    - dnsovertls
  routes:
    - match: HostSNI(`adguard.kluster.moll.re`)
      services:
        - name: adguard-home-dns-tcp
          port: 53
  tls:
    certResolver: default-tls