feat: lan-only + force-ssl for argocd/authentik/adguard labzand.com ingresses

ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks external access; separate IngressRoute on web 301-redirects http->https. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 16:37:02 +01:00
parent e857cb989c
commit 43fdc020f4
9 changed files with 134 additions and 0 deletions
@@ -6,6 +6,7 @@ metadata:
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.middlewares: authentik-lan-only@kubernetescrd
 spec:
  ingressClassName: traefik
  rules: