Trouble configuring Traefik ingress controller (terraform + k8s + helm + lets encrypt)

I am using terraform to manage my DO k8s cluster. I have installed Traefik ingress controller and cert-manager using Helm.

However, instead of using a LoadBalancer type service for the Traefik ingress controller, I want to define my own lb in Digital Ocean using the “digitalocean_loadbalancer” resource to prevent it changing ip address every time I update the service, and this way I can also manage the domain using a “digitalocean_domain” resource in terraform and link it to the ip of the load balancer.

However, this is not working as I expect. I have configured Traefik through Helm as follow:

resource "helm_release" "traefik" {
  name       = "traefik"
  repository = "https://traefik.github.io/charts"
  chart      = "traefik"
  namespace  = "traefik"
  version    = "v21.0.0"

  set {
    name  = "ports.web.redirectTo"
    value = "websecure"
  }

  set {
    name  = "service.type"
    value = "NodePort"
  }

  set {
    name  = "ports.web.nodePort"
    value = "30080"
  }

  set {
    name  = "ports.websecure.nodePort"
    value = "30443"
  }
}

This results in the following service being created:

I have the LB configured as follows:

However, when I perform a curl command I get the following response:

curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to my.domain:443

Can anyone tell me if I am doing this correctly and what can cause this error?

Thanks in advance!