does it work now?

apps/istio.yaml

@@ -3,11 +3,6 @@ kind: Namespace
 metadata:
   name: istio-system
 ---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: istio-ingress
----
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:

helm/istiod/templates/apps-gateway.yaml

@@ -1,16 +0,0 @@
-apiVersion: networking.istio.io/v1
-kind: Gateway
-metadata:
-  name: apps-gateway
-  namespace: istio-ingress
-spec:
-  selector:
-    app: ingressgateway
-  servers:
-  - port:
-      number: 80
-      name: http
-      protocol: HTTP
-    hosts:
-    - "*.apps.linvogel.ch"
-    - "*.apps.linvogel.internal"

helm/istiod/templates/gateway.yaml

@@ -0,0 +1,30 @@
+apiVersion: networking.istio.io/v1
+kind: Gateway
+metadata:
+  name: my-gateway
+  namespace: some-config-namespace
+spec:
+  selector:
+    app: my-gateway-controller
+  servers:
+  - port:
+      number: 80
+      name: http
+      protocol: HTTP
+    hosts:
+    - *.apps.linvogel.ch
+    - *.apps.linvogel.internal
+    tls:
+      httpsRedirect: true # sends 301 redirect for http requests
+  - port:
+      number: 443
+      name: https-443
+      protocol: HTTPS
+    hosts:
+    - *.apps.linvogel.ch
+    - *.apps.linvogel.internal
+    tls:
+      mode: SIMPLE 
+      serverCertificate: /etc/certs/servercert.pem
+      privateKey: /etc/certs/privatekey.pem
+