infrastructure-gitops

This patch adds DNS over TLS as a directly exposed service, this helps
to keep the setup simple and not rely on any ingress container to
function. TLS certificates are manged by cert-manager anyway, which
should make it easy to keep everything up-to-date with no problem.