apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: gitea
  namespace: gitea
  labels:
    app.kubernetes.io/name: drone
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/component: server
  annotations:
    kubernetes.io/ingress.class: "traefik"

spec:
  entryPoints:
    - https
  routes:
  # Match is the rule corresponding to an underlying router.
  # Later on, match could be the simple form of a path prefix, e.g. just "/bar",
  # but for now we only support a traefik style matching rule.
  - match: Host(`gitea.{{ cluster_domain }}`)
    # kind could eventually be one of "Rule", "Path", "Host", "Method", "Header",
    # "Parameter", etc, to support simpler forms of rule matching, but for now we
    # only support "Rule".
    kind: Rule
    # (optional) Priority disambiguates rules of the same length, for route matching.
    priority: 12
{% if ingress_whitelist is defined %}
    middlewares:
      - name: traefik-ipwhitelist@file
{% endif %}
    services:
    - name: gitea
      port: 3000
      # (default 1) A weight used by the weighted round-robin strategy (WRR).  
      weight: 1
      # (default true) PassHostHeader controls whether to leave the request's Host
      # Header as it was before it reached the proxy, or whether to let the proxy set it
      # to the destination (backend) host.
      passHostHeader: true
      responseForwarding:
        # (default 100ms) Interval between flushes of the buffered response body to the client.
        flushInterval: 100ms
  tls:
{% if gitea_certificate is defined %}
    secretName: {{ gitea_certificate }}
{% endif %}