##############################################################################
# VictoriaMetrics Traefik IngressRoute
# External: https://victoriametrics.vultrlabs.dev → Traefik → victoriametrics:8428
##############################################################################

---
# HTTP redirect to HTTPS
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: victoriametrics-redirect
  namespace: victoriametrics
spec:
  entryPoints:
    - web
  routes:
    - match: Host(`victoriametrics.vultrlabs.dev`)
      kind: Rule
      middlewares:
        - name: redirect-https
          namespace: victoriametrics
      services:
        - name: victoriametrics
          port: 8428

---
# HTTPS with basic auth
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: victoriametrics
  namespace: victoriametrics
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`victoriametrics.vultrlabs.dev`)
      kind: Rule
      middlewares:
        - name: basic-auth
          namespace: victoriametrics
      services:
        - name: victoriametrics
          port: 8428
  tls:
    certResolver: letsencrypt

---
# HTTPS redirect middleware
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: redirect-https
  namespace: victoriametrics
spec:
  redirectScheme:
    scheme: https
    permanent: true