The charm manages reverse-proxying by creating Kubernetes ingress resources and will enable TLS when the configured site URL demands it. The charm works with any client that stores the key and certificate in a standard Kubernetes secret. Use the charm’s tls_secret_name setting to tell it the name of the resource to use.