---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kanidm
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
    traefik.ingress.kubernetes.io/service.serversscheme: https
spec:
  tls:
    - hosts:
        - auth.hexor.cy
      secretName: kanidm-ingress-tls
  rules:
    - host: auth.hexor.cy
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: kanidm
                port:
                  number: 443