Upstream Traefik config

[robarnold]

Should have:

• Traefik for SSL termination/ingress
• cert-manager for issuing certs (wildcard OK)
• HTTP to HTTPS redirect
• Optional external-dns support as a component

[sdwilsh]

I'm not confident we want to share this since it means we'll both be pinned to whatever version is in this repository (so we don't have independence of upgrades).