k8s.app.lan (Traefik on kryptovisor)Date: 2026-02-10
Provide a stable, certificate-backed URL for the Kubernetes Dashboard (instead of direct NodePort access).
https://k8s.app.lan/https://192.168.1.9:32443 (Service/kubernetes-dashboard-nodeport, namespace kubernetes-dashboard)kryptovisor Traefik using *.app.lan wildcard certificate.kryptovisor:
/mnt/fastdata/docker/apps/traefik/config/docker/cert_conf.ymlHost(\k8s.app.lan`)` routing to the Dashboard NodePort over HTTPS.serversTransport with insecureSkipVerify: true because the Dashboard's in-cluster TLS certificate is not trusted by Traefik.kryptovisor: traefik-traefik-1curl -k https://k8s.app.lan/ returns 200.openssl s_client -connect k8s.app.lan:443 -servername k8s.app.lan presents the expected *.app.lan certificate.Kryptovisor Local CA to avoid browser warnings (or use -k for CLI validation).https://192.168.1.9:32443/ for break-glass access.