Files
cluster/services/argocd/ingressroute-redirect.yaml
willemjan 43fdc020f4 feat: lan-only + force-ssl for argocd/authentik/adguard labzand.com ingresses
ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks
external access; separate IngressRoute on web 301-redirects http->https.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 16:37:02 +01:00

20 lines
497 B
YAML

# HTTP (entrypoint web) -> HTTPS redirect voor argocd.labzand.com.
# services: api@internal is een dummy - de redirect middleware stuurt
# nooit door naar een backend.
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: argocd-redirect
namespace: argocd
spec:
entryPoints:
- web
routes:
- match: Host(`argocd.labzand.com`)
kind: Rule
middlewares:
- name: redirect-https
services:
- name: api@internal
kind: TraefikService