---
apiVersion: v1
kind: Namespace
metadata:
  name: esp32
  labels:
    app.kubernetes.io/name: esp32
---
apiVersion: v1
kind: Service
metadata:
  name: esp
  namespace: esp32
  labels:
    app.kubernetes.io/name: esp32
spec:
  type: ClusterIP
  ports:
    - name: http
      port: 80
      targetPort: 80
---
apiVersion: v1
kind: Endpoints
metadata:
  name: esp
  namespace: esp32
  labels:
    app.kubernetes.io/name: esp32
subsets:
  - addresses:
      - ip: 192.168.88.88
    ports:
      - name: http
        port: 80
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: strip-esp-headers
  namespace: esp32
  labels:
    app.kubernetes.io/name: esp32
spec:
  headers:
    customRequestHeaders:
      Cookie: ""
      Referer: ""
      Origin: ""
      User-Agent: ""
      Accept: ""
      Accept-Encoding: ""
      Accept-Language: ""
      Upgrade-Insecure-Requests: ""
      Cache-Control: ""
      Pragma: ""
      Connection: ""
      Te: ""
      Sec-Fetch-Dest: ""
      Sec-Fetch-Mode: ""
      Sec-Fetch-Site: ""
      Sec-Fetch-User: ""
      Sec-CH-UA: ""
      Sec-CH-UA-Mobile: ""
      Sec-CH-UA-Platform: ""
      X-Forwarded-For: ""
      X-Forwarded-Host: ""
      X-Forwarded-Port: ""
      X-Forwarded-Proto: ""
      X-Forwarded-Server: ""
      Forwarded: ""
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: esp
  namespace: esp32
  labels:
    app.kubernetes.io/name: esp32
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`esp.forust.xyz`)
      kind: Rule
      middlewares:
        - name: strip-esp-headers
          namespace: esp32
      services:
        - kind: Service
          name: esp
          namespace: esp32
          port: 80
  tls:
    certResolver: letsencrypt