upgrade ingress

.gitignore

@@ -0,0 +1 @@
+*.data

README.md

@@ -77,3 +77,9 @@ export DISK=/nvme
 export DISK=/mnt/enc0/kube
 export DISK=/mnt/USB_SSD/kube
 ```
+
+### Mac
+
+```bash
+sudo rsync --progress -v ./test.data /Volumes/Backup/test.data
+```

helm/templates/ingress.yaml

@@ -2,31 +2,29 @@
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: {{ .Release.Name }}-internal-tls
+  name: {{ .Release.Name }}-tls
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik
 spec:
   entryPoints:
     - websecure
   tls:
-    certResolver: myresolver
+    certResolver: duconet
-    domains:
-    - main: "*.ducoterra.net"
   routes:
   - match: Host(`{{ .Release.Name }}.ducoterra.net`)
     kind: Rule
     services:
     - name: {{ .Release.Name }}-glances
       port: 61208
-
+    middlewares:
+      - name: basic-auth-{{ .Release.Name }}
 ---
-
 apiVersion: traefik.containo.us/v1alpha1
 kind: IngressRoute
 metadata:
-  name: {{ .Release.Name }}-internal-web
+  name: {{ .Release.Name }}
   annotations:
-    kubernetes.io/ingress.class: traefik-internal
+    kubernetes.io/ingress.class: traefik
 spec:
   entryPoints:
     - web
@@ -37,5 +35,23 @@ spec:
     - name: {{ .Release.Name }}-glances
       port: 61208
     middlewares:
-      - name: httpsredirect
+      - name: httpsredirect-{{ .Release.Name }}
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: httpsredirect-{{ .Release.Name }}
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: basic-auth-{{ .Release.Name }}
+spec:
+  basicAuth:
+    secret: authsecret
+    removeHeader: true
 {{ end }}