This looks promising:
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes


## Import auth

https://kubernetes.github.io/ingress-nginx/examples/auth/basic/

```
kubectl create secret generic basic-auth --from-file=auth
kubectl -n monitoring create secret generic basic-auth --from-file=auth
```