apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: adguard-prod
  namespace: adguard
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`dns.forust.xyz`)
      kind: Rule
      middlewares:
        - name: crowdsec-bouncer
          namespace: crowdsec
      services:
        - name: adguard-service
          port: 3000
    - match: (Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000
  tls:
    secretName: adguard-certs
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: adguard-local
  namespace: adguard
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`) || Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000
    - match: (Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`) || Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)) && PathPrefix(`/dns-query`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000