Add internal-only middleware to Gitea IngressRoute

Restrict Gitea web UI to LAN access only, matching other platform services. SSH NodePort (30022) is unaffected.
2026-03-21 16:02:24 +00:00
parent a4553fbeae
commit cb733c92a0
1 changed files with 3 additions and 0 deletions
--- a/infra/kubernetes/platform/traefik/ingressroute-gitea.yaml
+++ b/infra/kubernetes/platform/traefik/ingressroute-gitea.yaml
@@ -11,6 +11,9 @@ spec:
  routes:
    - match: Host(`gitea.coreworlds.io`)
      kind: Rule
+      middlewares:
+        - name: internal-only
+          namespace: platform
      services:
        - name: gitea-helm-http
          namespace: platform