apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: syncthing-ingressroute
  namespace: syncthing
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`ss.hexor.cy`)
      kind: Rule
      services:
        - name: syncthing-landing
          port: 80
      middlewares:
        - name: authentik-forward-auth
          namespace: syncthing
    - match: Host(`ss.hexor.cy`) && PathPrefix(`/nas`)
      kind: Rule
      services:
        - name: syncthing-nas
          port: 8384
      middlewares:
        - name: authentik-forward-auth
          namespace: syncthing
        - name: strip-prefix-nas
          namespace: syncthing
    - match: Host(`ss.hexor.cy`) && PathPrefix(`/master`)
      kind: Rule
      services:
        - name: syncthing-master
          port: 8384
      middlewares:
        - name: authentik-forward-auth
          namespace: syncthing
        - name: strip-prefix-master
          namespace: syncthing
    - match: Host(`ss.hexor.cy`) && PathPrefix(`/iris`)
      kind: Rule
      services:
        - name: syncthing-khv
          port: 8384
      middlewares:
        - name: authentik-forward-auth
          namespace: syncthing
        - name: strip-prefix-iris
          namespace: syncthing
  tls:
    secretName: syncthing-tls