Set `tls:` for ingresses

cert-manager needs you to set tls: variables in the ingress definitions, otherwise it won't get you the certificates.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information