apiVersion: traefik.containo.us/v1alpha1 kind: IngressRouteTCP metadata: name: adguard-tls-ingress spec: entryPoints: - dnsovertls routes: - match: HostSNI(`adguard.kluster.moll.re`) services: - name: adguard-home-dns-tcp port: 53 tls: certResolver: default-tls