# routes for soulsync.ahmza.com through ingress-nginx (docs/11-ingress.md)
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: soulsync
  namespace: soulsync
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
  # Select ingress-nginx explicitly rather than relying on whichever ingress
  # controller happens to be configured as the cluster-wide default.
  ingressClassName: nginx
  tls:
    - hosts:
      - soulsync.ahmza.com
        # cert-manager keeps this up to date. nothing to do by hand
      secretName: soulsync-tls
  rules:
    - host: soulsync.ahmza.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: soulsync
                port:
                  number: 8008