upgrade to new ingress spec

helm/templates/ingress.yaml

@@ -1,83 +1,65 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: {{ .Release.Name }}-internal-tls
+  name: {{ .Release.Name }}-tls
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik
 spec:
   entryPoints:
     - websecure
   tls:
-    certResolver: myresolver
+    certResolver: duconet
-    domains:
-    - main: "*.ducoterra.net"
   routes:
-  - match: Host(`jellyfin.ducoterra.net`)
+  - match: Host(`{{ .Release.Name }}.ducoterra.net`)
     kind: Rule
     services:
     - name: {{ .Release.Name }}
       port: 8096
     middlewares:
-      - name: {{ .Release.Name }}
+      - name: headers-{{ .Release.Name }}
-
 ---
-
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: {{ .Release.Name }}-internal-web
+  name: {{ .Release.Name }}
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik
 spec:
   entryPoints:
     - web
   routes:
-  - match: Host(`jellyfin.ducoterra.net`)
+  - match: Host(`{{ .Release.Name }}.ducoterra.net`)
     kind: Rule
     services:
     - name: {{ .Release.Name }}
       port: 8096
     middlewares:
-      - name: httpsredirect
+      - name: httpsredirect-{{ .Release.Name }}
-
 ---
-
 apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
+kind: Middleware
 metadata:
-  name: {{ .Release.Name }}-external-tls
+  name: httpsredirect-{{ .Release.Name }}
-  annotations:
-    kubernetes.io/ingress.class: traefik-external
 spec:
-  entryPoints:
+  redirectScheme:
-    - websecure
+    scheme: https
-  tls:
+    permanent: true
-    certResolver: myresolver
-  routes:
-  - match: Host(`jellyfin.ducoterra.net`)
-    kind: Rule
-    services:
-    - name: {{ .Release.Name }}
-      port: 8096
-    middlewares:
-      - name: {{ .Release.Name }}
-
 ---
-
 apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
+kind: Middleware
 metadata:
-  name: {{ .Release.Name }}-external-web
+  name: headers-{{ .Release.Name }}
-  annotations:
-    kubernetes.io/ingress.class: traefik-external
 spec:
-  entryPoints:
+  headers:
-    - web
+    customResponseHeaders:
-  routes:
+      X-Robots-Tag: "noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex"
-  - match: Host(`jellyfin.ducoterra.net`)
+    SSLHost: "jellyfin.ducoterra.net"
-    kind: Rule
+    SSLForceHost: true
-    services:
+    STSSeconds: "315360000"
-    - name: {{ .Release.Name }}
+    STSIncludeSubdomains: true
-      port: 8096
+    STSPreload: true
-    middlewares:
+    forceSTSHeader: true
-      - name: httpsredirect
+    frameDeny: true
+    contentTypeNosniff: true
+    browserXSSFilter: true
+    customFrameOptionsValue: "https://jellyfin.ducoterra.net"