cb733c92a0
Restrict Gitea web UI to LAN access only, matching other platform services. SSH NodePort (30022) is unaffected.
23 lines
487 B
YAML
23 lines
487 B
YAML
apiVersion: traefik.io/v1alpha1
|
|
kind: IngressRoute
|
|
metadata:
|
|
name: gitea
|
|
namespace: platform
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
|
spec:
|
|
entryPoints:
|
|
- websecure
|
|
routes:
|
|
- match: Host(`gitea.coreworlds.io`)
|
|
kind: Rule
|
|
middlewares:
|
|
- name: internal-only
|
|
namespace: platform
|
|
services:
|
|
- name: gitea-helm-http
|
|
namespace: platform
|
|
port: 3000
|
|
tls:
|
|
secretName: gitea-tls
|