# Nextcloud
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: nextcloud-prod
  namespace: nextcloud
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`nextcloud.forust.xyz`)
      kind: Rule
      middlewares:
        - name: nextcloud-chain@file
        - name: crowdsec-crowdsec-bouncer@kubernetescrd
      services:
        - name: nextcloud-apache
          port: 11000
  tls:
    certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: nextcloud-local
  namespace: nextcloud
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`nextcloud.workstation.internal`) || Host(`nextcloud.gigaforust.internal`)
      kind: Rule
      middlewares:
        - name: "crowdsec-crowdsec-bouncer@kubernetescrd"
        - name: nextcloud-chain@file
      services:
        - name: nextcloud-apache
          port: 11000
# ---
# Nextcloud AIO
# apiVersion: traefik.io/v1alpha1
# kind: IngressRoute
# metadata:
#   name: naio-prod
#   namespace: nextcloud
# spec:
#   entryPoints:
# - websecure
# routes:
#   - match: Host(`naio.forust.xyz`)
#     kind: Rule
#     services:
#       - name: nextcloud-aio
#         port: 8888
#         scheme: https
#         serversTransport: insecure-transport
# tls:
#   certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: naio-local
  namespace: nextcloud
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`naio.workstation.internal`) || Host(`naio.gigaforust.internal`)
      kind: Rule
      services:
        - name: nextcloud-aio
          port: 8888
          scheme: https
          serversTransport: insecure-transport