apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: authentik
  namespace: security
  annotations:
    gethomepage.dev/app: authentik-server
    gethomepage.dev/enabled: "false"
    gethomepage.dev/group: Security
    gethomepage.dev/href: https://auth.olb42.com/
    gethomepage.dev/icon: authentik
    gethomepage.dev/name: Authentik
    gethomepage.dev/namespace: security
    gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_AUTHENTIK_KEY}}"
    gethomepage.dev/widget.type: authentik
    gethomepage.dev/widget.url: http://authentik.security:9000
    gethomepage.dev/widget.version: "2"
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`auth.olb42.com`)
      middlewares:
        - name: lan-only
          namespace: infra
      services:
        - name: authentik
          port: 9000
  tls:
    secretName: olb42-wildcard-tls