apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: adguard-prod
  namespace: adguard
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000
  tls:
    certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: adguard-local
  namespace: adguard
spec:
  entryPoints:
    - websecure
  routes:
    - match: HostRegexp(`^(adguard|dns)\.(workstation|gigaforust)\.internal$`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: adguard-doh
  namespace: adguard
spec:
  entryPoints:
    - websecure
  routes:
    - match: (Host(`adguard.forust.xyz`) || Host(`dns.forust.xyz`)) && PathPrefix(`/dns-query`)
      kind: Rule
      services:
        - name: adguard-service
          port: 3000
  tls:
    certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRouteTCP
metadata:
  name: adguard-dot
  namespace: adguard
spec:
  entryPoints:
    - dot
  routes:
    - match: HostSNI(`*`)
      services:
        - name: adguard-service
          port: 853