apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: netbird-management
  namespace: netbird
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`netbird.archfox.org`) && PathPrefix(`/management.ManagementService/`)
      kind: Rule
      services:
        - name: management
          port: 80
          scheme: h2c
    - match: Host(`netbird.archfox.org`) && PathPrefix(`/api/`)
      kind: Rule
      services:
        - name: management
          port: 80
    - match: Host(`netbird.archfox.org`) && PathPrefix(`/signalexchange.SignalExchange/`)
      kind: Rule
      services:
        - name: signal
          port: 10000
          scheme: h2c
    - match: Host(`netbird.archfox.org`) && PathPrefix(`/relay`)
      kind: Rule
      services:
        - name: relay
          port: 33073
  tls:
    certResolver: letsencrypt