apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/ssl-redirect: "true"
  name: $DEPLOY
spec:
  tls:
  - hosts:
    - $DEPLOY.ducoterra.net
    secretName: letsencrypt
  rules:
  - host: $DEPLOY.ducoterra.net
    http:
      paths:
      - backend:
          serviceName: $DEPLOY
          servicePort: 8000

---

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: $DEPLOY-external-tls
spec:
  entryPoints:
    - websecure
  tls:
    secretName: letsencrypt
  routes:
  - match: Host(`$DEPLOY.ducoterra.net`)
    kind: Rule
    services:
    - name: $DEPLOY
      port: 8000

---

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: $DEPLOY-external-web
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`$DEPLOY.ducoterra.net`)
    kind: Rule
    services:
    - name: $DEPLOY
      port: 8000
    middlewares:
      - name: httpsredirect