chore(k8s): returned to Host || Host standart instead of regexp.

Yaml lint (yamllint)

adguardhome/k8s/ingress.yaml

@@ -1,52 +1,52 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: adguard-prod
+   name: adguard-prod
-  namespace: adguard
+   namespace: adguard
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
+      - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-      services:
+        services:
-        - name: adguard-service
+           - name: adguard-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: adguard-local
+   name: adguard-local
-  namespace: adguard
+   namespace: adguard
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^(adguard|dns)\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`) || Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: adguard-service
+           - name: adguard-service
-          port: 3000
+             port: 3000
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: adguard-doh
+   name: adguard-doh
-  namespace: adguard
+   namespace: adguard
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: (Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
+      - match: (Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-      services:
+        services:
-        - name: adguard-service
+           - name: adguard-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt

authentik/k8s/ingress.yaml

@@ -26,7 +26,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^auth\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`auth.workstation.internal`) || Host(`auth.gigaforust.internal`)
       kind: Rule
       services:
         - name: authentik-server-service

checkmk/k8s/ingress.yaml

@@ -1,33 +1,33 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: checkmk-prod
+   name: checkmk-prod
-  namespace: checkmk
+   namespace: checkmk
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`cmk.forust.xyz`)
+      - match: Host(`cmk.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-      services:
+        services:
-        - name: checkmk-service
+           - name: checkmk-service
-          port: 5000
+             port: 5000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: checkmk-local
+   name: checkmk-local
-  namespace: checkmk
+   namespace: checkmk
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^cmk\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`cmk.workstation.internal`) || Host(`cmk.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: checkmk-service
+           - name: checkmk-service
-          port: 5000
+             port: 5000

converters/k8s/ingress.yaml

@@ -1,65 +1,65 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: convertx-prod
+   name: convertx-prod
-  namespace: converters
+   namespace: converters
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: (Host(`forust.xyz`) || Host(`www.forust.xyz`)) && PathPrefix(`/convert`)
+      - match: (Host(`forust.xyz`) || Host(`www.forust.xyz`)) && PathPrefix(`/convert`)
-      kind: Rule
+        kind: Rule
-      priority: 50
+        priority: 50
-      services:
+        services:
-        - name: convertx-service
+           - name: convertx-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: convertx-local
+   name: convertx-local
-  namespace: converters
+   namespace: converters
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^(workstation|gigaforust)\.internal$`) && PathPrefix(`/convert`)
+      - match: (Host(`workstation.internal`) || Host(`gigaforust.internal`)) && PathPrefix(`/convert`)
-      kind: Rule
+        kind: Rule
-      priority: 50
+        priority: 50
-      services:
+        services:
-        - name: convertx-service
+           - name: convertx-service
-          port: 3000
+             port: 3000
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: bentopdf-prod
+   name: bentopdf-prod
-  namespace: converters
+   namespace: converters
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`pdf.forust.xyz`)
+      - match: Host(`pdf.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: bentopdf-service
+           - name: bentopdf-service
-          port: 8080
+             port: 8080
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: bentopdf-local
+   name: bentopdf-local
-  namespace: converters
+   namespace: converters
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^pdf\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`pdf.workstation.internal`) || Host(`pdf.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: bentopdf-service
+           - name: bentopdf-service
-          port: 8080
+             port: 8080

dockmon/k8s/ingress.yaml

@@ -1,44 +1,44 @@
 apiVersion: traefik.io/v1alpha1
 kind: ServersTransport
 metadata:
-  name: dockmon-transport
+   name: dockmon-transport
-  namespace: dockmon
+   namespace: dockmon
 spec:
-  insecureSkipVerify: true
+   insecureSkipVerify: true
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: dockmon-prod
+   name: dockmon-prod
-  namespace: dockmon
+   namespace: dockmon
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`dockmon.forust.xyz`)
+      - match: Host(`dockmon.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-        - name: security-headers@file
+           - name: security-headers@file
-      services:
+        services:
-        - name: dockmon-service
+           - name: dockmon-service
-          port: 443
+             port: 443
-          serversTransport: dockmon-transport
+             serversTransport: dockmon-transport
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: dockmon-local
+   name: dockmon-local
-  namespace: dockmon
+   namespace: dockmon
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^dockmon\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`dockmon.workstation.internal`) || Host(`dockmon.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: dockmon-service
+           - name: dockmon-service
-          port: 443
+             port: 443
-          serversTransport: dockmon-transport
+             serversTransport: dockmon-transport

downtify/k8s/ingress.yaml

@@ -1,34 +1,34 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: downtify-prod
+   name: downtify-prod
-  namespace: downtify
+   namespace: downtify
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`downtify.forust.xyz`)
+      - match: Host(`downtify.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-        - name: security-chain@file
+           - name: security-chain@file
-      services:
+        services:
-        - name: downtify-service
+           - name: downtify-service
-          port: 8000
+             port: 8000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: downtify-local
+   name: downtify-local
-  namespace: downtify
+   namespace: downtify
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^downtify\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`downtify.workstation.internal`) || Host(`downtify.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: downtify-service
+           - name: downtify-service
-          port: 8000
+             port: 8000

gitea/k8s/ingress.yaml

@@ -1,65 +1,64 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: gitea-prod
+   name: gitea-prod
-  namespace: gitea
+   namespace: gitea
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`gitea.forust.xyz`)
+      - match: Host(`gitea.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-      services:
+        services:
-        - name: gitea-service
+           - name: gitea-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: gitea-local
+   name: gitea-local
-  namespace: gitea
+   namespace: gitea
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^gitea\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`gitea.workstation.internal`) || Host(`gitea.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: gitea-service
+           - name: gitea-service
-          port: 3000
+             port: 3000
-
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: gitea-registry
+   name: gitea-registry
-  namespace: gitea
+   namespace: gitea
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`gcr.forust.xyz`) && PathPrefix(`/v2`)
+      - match: Host(`gcr.forust.xyz`) && PathPrefix(`/v2`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: gitea-service
+           - name: gitea-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRouteTCP
 metadata:
-  name: gitea-ssh
+   name: gitea-ssh
-  namespace: gitea
+   namespace: gitea
 spec:
-  entryPoints:
+   entryPoints:
-    - ssh
+      - ssh
-  routes:
+   routes:
-    - match: HostSNI(`*`)
+      - match: HostSNI(`*`)
-      services:
+        services:
-        - name: gitea-service
+           - name: gitea-service
-          port: 2221
+             port: 2221

glance/k8s/ingress.yaml

@@ -27,7 +27,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^glance\.(workstation|gigaforust)\.internal$`) && PathPrefix(`/glance`)
+    - match: (Host(`glance.workstation.internal`) || Host(`glance.gigaforust.internal`)) && PathPrefix(`/glance`)
       kind: Rule
       middlewares:
         - name: glance-stripprefix

headscale/k8s/ingress.yaml

@@ -1,57 +1,57 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: headscale-server-prod
+   name: headscale-server-prod
-  namespace: headscale
+   namespace: headscale
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`hs.forust.xyz`)
+      - match: Host(`hs.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-      services:
+        services:
-        - name: headscale-server-external
+           - name: headscale-server-external
-          port: 8080
+             port: 8080
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: headscale-server-local
+   name: headscale-server-local
-  namespace: headscale
+   namespace: headscale
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^hs\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`hs.workstation.internal`) || Host(`hs.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: headscale-server-external
+           - name: headscale-server-external
-          port: 8080
+             port: 8080
 
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: headscale-ui-prod
+   name: headscale-ui-prod
-  namespace: headscale
+   namespace: headscale
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
+      - match: Host(`hs.forust.xyz`) && PathPrefix(`/admin`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-        - name: security-chain@file
+           - name: security-chain@file
-      services:
+        services:
-        - name: headscale-ui-external
+           - name: headscale-ui-external
-          port: 80
+             port: 80
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute

homepages/k8s/ingress.yaml

@@ -1,69 +1,69 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: forust-homepage-prod
+   name: forust-homepage-prod
-  namespace: homepages
+   namespace: homepages
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`forust.xyz`) || Host(`www.forust.xyz`)
+      - match: Host(`forust.xyz`) || Host(`www.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-      priority: 10
+        priority: 10
-      services:
+        services:
-        - name: forust-homepage-service
+           - name: forust-homepage-service
-          port: 80
+             port: 80
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: forust-homepage-local
+   name: forust-homepage-local
-  namespace: homepages
+   namespace: homepages
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^landing\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`landing.workstation.internal`) || Host(`landing.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      priority: 10
+        priority: 10
-      services:
+        services:
-        - name: forust-homepage-service
+           - name: forust-homepage-service
-          port: 80
+             port: 80
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: xdfnx-homepage-prod
+   name: xdfnx-homepage-prod
-  namespace: homepages
+   namespace: homepages
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`xdfnx.cfd`) || Host(`www.xdfnx.cfd`)
+      - match: Host(`xdfnx.cfd`) || Host(`www.xdfnx.cfd`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-      services:
+        services:
-        - name: xdfnx-homepage-service
+           - name: xdfnx-homepage-service
-          port: 80
+             port: 80
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: xdfnx-homepage-local
+   name: xdfnx-homepage-local
-  namespace: homepages
+   namespace: homepages
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^xdfnx\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`xdfnx.workstation.internal`) || Host(`xdfnx.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: xdfnx-homepage-service
+           - name: xdfnx-homepage-service
-          port: 80
+             port: 80

kener/k8s/ingress.yaml

@@ -1,33 +1,33 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: kener-prod
+   name: kener-prod
-  namespace: kener
+   namespace: kener
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`status.forust.xyz`)
+      - match: Host(`status.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: crowdsec-crowdsec-bouncer@kubernetescrd
+           - name: crowdsec-crowdsec-bouncer@kubernetescrd
-      services:
+        services:
-        - name: kener-service
+           - name: kener-service
-          port: 3000
+             port: 3000
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: kener-local
+   name: kener-local
-  namespace: kener
+   namespace: kener
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^status\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`status.workstation.internal`) || Host(`status.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: kener-service
+           - name: kener-service
-          port: 3000
+             port: 3000

metube/k8s/ingress.yaml

@@ -4,30 +4,30 @@ metadata:
   name: metube-prod
   namespace: metube
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`metube.forust.xyz`)
+      - match: Host(`metube.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: security-headers@file
+           - name: security-headers@file
-      services:
+        services:
-        - name: metube-service
+           - name: metube-service
-          port: 8081
+             port: 8081
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: metube-local
+   name: metube-local
-  namespace: metube
+   namespace: metube
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^metube\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`metube.workstation.internal`) || Host(`metube.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: metube-service
+           - name: metube-service
-          port: 8081
+             port: 8081

n8n/k8s/ingress.yaml

@@ -1,33 +1,33 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: n8n-prod
+   name: n8n-prod
-  namespace: n8n
+   namespace: n8n
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`n8n.forust.xyz`)
+      - match: Host(`n8n.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-      services:
+        services:
-        - name: n8n-service
+           - name: n8n-service
-          port: 5678
+             port: 5678
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: n8n-local
+   name: n8n-local
-  namespace: n8n
+   namespace: n8n
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^n8n\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`n8n.workstation.internal`) || Host(`n8n.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: n8n-service
+           - name: n8n-service
-          port: 5678
+             port: 5678

netronome/k8s/ingress.yaml

@@ -1,33 +1,33 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: netronome-prod
+   name: netronome-prod
-  namespace: netronome
+   namespace: netronome
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`nm.forust.xyz`)
+      - match: Host(`nm.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-      services:
+        services:
-        - name: netronome-service
+           - name: netronome-service
-          port: 7575
+             port: 7575
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: netronome-local
+   name: netronome-local
-  namespace: netronome
+   namespace: netronome
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^nm\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`nm.workstation.internal`) || Host(`nm.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: netronome-service
+           - name: netronome-service
-          port: 7575
+             port: 7575

nextcloud/k8s/ingress.yaml

@@ -28,7 +28,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^nextcloud\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`nextcloud.workstation.internal`) || Host(`nextcloud.gigaforust.internal`)
       kind: Rule
       middlewares:
         - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
@@ -36,8 +36,6 @@ spec:
       services:
         - name: nextcloud-apache
           port: 11000
-
-
 # ---
 # Nextcloud AIO
 # apiVersion: traefik.io/v1alpha1
@@ -68,7 +66,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^naio\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`naio.workstation.internal`) || Host(`naio.gigaforust.internal`)
       kind: Rule
       services:
         - name: nextcloud-aio

portainer/k8s/ingress.yaml

@@ -26,7 +26,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^portainer\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`portainer.workstation.internal`) || Host(`portainer.gigaforust.internal`)
       kind: Rule
       services:
         - name: portainer-service

prometheus-stack/k8s/ingress.yaml

@@ -1,36 +1,36 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: grafana-prod
+   name: grafana-prod
-  namespace: prometheus
+   namespace: prometheus
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: Host(`grafana.forust.xyz`)
+      - match: Host(`grafana.forust.xyz`)
-      kind: Rule
+        kind: Rule
-      middlewares:
+        middlewares:
-        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
+           - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
-        - name: "security-chain@file"
+           - name: "security-chain@file"
-      services:
+        services:
-        - name: prometheus-stack-grafana
+           - name: prometheus-stack-grafana
-          port: 80
+             port: 80
-  tls:
+   tls:
-    certResolver: letsencrypt
+      certResolver: letsencrypt
-    domains:
+      domains:
-      - main: grafana.forust.xyz
+         - main: grafana.forust.xyz
 ---
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: grafana-local
+   name: grafana-local
-  namespace: prometheus
+   namespace: prometheus
 spec:
-  entryPoints:
+   entryPoints:
-    - websecure
+      - websecure
-  routes:
+   routes:
-    - match: HostRegexp(`^grafana\.(workstation|gigaforust)\.internal$`)
+      - match: Host(`grafana.workstation.internal`) || Host(`grafana.gigaforust.internal`)
-      kind: Rule
+        kind: Rule
-      services:
+        services:
-        - name: prometheus-stack-grafana
+           - name: prometheus-stack-grafana
-          port: 80
+             port: 80

searxng/k8s/ingress.yaml

@@ -26,7 +26,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^(s|searxng)\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`s.workstation.internal`) || Host(`searxng.workstation.internal`) || Host(`s.gigaforust.internal`) || Host(`searxng.gigaforust.internal`)
       kind: Rule
       services:
         - name: searxng-service

termix/k8s/ingress.yaml

@@ -26,7 +26,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^termix\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`termix.workstation.internal`) || Host(`termix.gigaforust.internal`)
       kind: Rule
       services:
         - name: termix-service

traefik/k8s/ingress.yaml

@@ -27,7 +27,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^traefik\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`traefik.workstation.internal`) || Host(`traefik.gigaforust.internal`)
       kind: Rule
       services:
         - name: api@internal

uptime-kuma/k8s/ingress.yaml

@@ -26,7 +26,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: HostRegexp(`^uptime\.(workstation|gigaforust)\.internal$`)
+    - match: Host(`uptime.workstation.internal`) || Host(`uptime.gigaforust.internal`)
       kind: Rule
       services:
         - name: uptime-kuma-service