apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: gitfed
  namespace: gitfed
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
  ingressClassName: traefik
  tls:
    - hosts: ["git.neuromancer.ovh"]
      secretName: gitfed-tls
  rules:
    - host: git.neuromancer.ovh
      http:
        paths:
          # Prefix, not Exact: also covers /.well-known/gitfed-notify
          # (federated notification receiver) without needing a second rule
          # every time a new well-known path is added.
          - path: /.well-known/
            pathType: Prefix
            backend:
              service:
                name: gitfed-wellknown
                port: {number: 8443}
          - path: /
            pathType: Prefix
            backend:
              service:
                name: gitfed-web
                port: {number: 8088}