How to get TLS/SSL with hetzner LB?

Question

I have Hetzner LB and bitnami Discourse app.

I don't know how to get SSL/TLS connection.

I guess connection should be next Hetzner LB -> (proxy)-> My ingress-> regular service for pod connection -> pod/backend

I guess ingress should be responsible for TLS/SSL.

Any help is appreciate.