apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: calibre-web-automated
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: calibre-web-automated
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/version: {{ .Chart.AppVersion }}
    app.kubernetes.io/component: web
    app.kubernetes.io/part-of: {{ .Release.Name }}
  annotations:
    external-dns.alpha.kubernetes.io/hostname: calibre.alexlebens.net
    external-dns.alpha.kubernetes.io/target: cl01tl-endpoint.alexlebens.net
    kubernetes.io/ingress.class: traefik
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`calibre.alexlebens.net`)
      middlewares:
        - name: authentik-calibre-web-automated
          namespace: {{ .Release.Namespace }}
      priority: 10
      services:
        - kind: Service
          name: calibre-web-automated
          port: 80
    - kind: Rule
      match: Host(`calibre.alexlebens.net`) && PathPrefix(`/outpost.goauthentik.io/`)"
      priority: 15
      services:
        - kind: Service
          name: authentik-outpost-proxy
          port: 9000
          namespace: authentik