---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: kanidm
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`auth.hexor.cy`)
      kind: Rule
      services:
        - name: kanidm
          port: 443
          scheme: https
          serversTransport: kanidm-transport
  tls:
    secretName: kanidm-ingress-tls