feat(sftpgo): add TLS support and internal certificate management

terraform/modules/apps/sftpgo/ingress.tf

@@ -6,7 +6,7 @@ resource "kubernetes_ingress_v1" "ingress" {
     name      = "webdav-ingress"
     namespace = kubernetes_namespace.sftpgo.metadata[0].name
 
-    annotations = {
+    annotations = merge({
       "kubernetes.io/ingress.class"                         = "public"
       "cert-manager.io/cluster-issuer"                      = "letsencrypt-prod"
       "kubernetes.io/tls-acme"                              = "true"
@@ -15,7 +15,15 @@ resource "kubernetes_ingress_v1" "ingress" {
       "nginx.ingress.kubernetes.io/proxy-request-buffering" = "on"
       "nginx.ingress.kubernetes.io/proxy-buffer-size"       = "32k"
       "nginx.ingress.kubernetes.io/proxy-buffers-number"    = "16"
-    }
+      },
+      var.tls_enabled ? {
+        "nginx.org/ssl-services"                       = "webdav"
+        "nginx.org/ssl-redirect"                       = "true"
+        "nginx.org/redirect-to-https"                  = "true"
+        "nginx.ingress.kubernetes.io/backend-protocol" = "HTTPS"
+      } : {}
+    )
+
   }
   spec {
     tls {
@@ -30,7 +38,7 @@ resource "kubernetes_ingress_v1" "ingress" {
             service {
               name = "webdav"
               port {
-                number = 8081
+                name = var.tls_enabled ? "davs" : "dav"
               }
             }
           }