WIP gitea

templates/gitea/gitea-IngressRoute.yml.j2

@@ -0,0 +1,49 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: gitea
+  namespace: gitea
+  labels:
+    app.kubernetes.io/name: drone
+    app.kubernetes.io/instance: gitea
+    app.kubernetes.io/component: server
+  annotations:
+    kubernetes.io/ingress.class: "traefik"
+
+spec:
+  entryPoints:
+    - https
+  routes:
+  # Match is the rule corresponding to an underlying router.
+  # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
+  # but for now we only support a traefik style matching rule.
+  - match: Host(`gitea.{{ traefik_domain }}`)
+    # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
+    # "Parameter", etc, to support simpler forms of rule matching, but for now we
+    # only support "Rule".
+    kind: Rule
+    # (optional) Priority disambiguates rules of the same length, for route matching.
+    priority: 12
+{% if ingress_whitelist is defined %}
+    middlewares:
+      - name: traefik-ipwhitelist
+{% endif %}
+    services:
+    - name: gitea
+      port: 3000
+      # (default 1) A weight used by the weighted round-robin strategy (WRR).  
+      weight: 1
+      # (default true) PassHostHeader controls whether to leave the request's Host
+      # Header as it was before it reached the proxy, or whether to let the proxy set it
+      # to the destination (backend) host.
+      passHostHeader: true
+      responseForwarding:
+        # (default 100ms) Interval between flushes of the buffered response body to the client.
+        flushInterval: 100ms
+  tls:
+{% if gitea_certificate is defined %}
+    secretName: {{ gitea_certificate }}
+{% endif %}
+    options:
+      name: default
+      namespace: {{ traefik_namespace }}