infra/k8s/ingress.yaml
2025-08-03 02:44:38 +02:00

74 lines
1.6 KiB
YAML

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: xpeditis-ingress
namespace: xpeditis
annotations:
kubernetes.io/ingress.class: "nginx"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
nginx.ingress.kubernetes.io/rate-limit: "100"
nginx.ingress.kubernetes.io/rate-limit-window: "1m"
spec:
tls:
- hosts:
- xpeditis.fr
- www.xpeditis.fr
- api.xpeditis.fr
secretName: xpeditis-tls
rules:
# Frontend principal
- host: xpeditis.fr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: frontend-service
port:
number: 80
# Redirection www vers domaine principal
- host: www.xpeditis.fr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: frontend-service
port:
number: 80
# API Backend
- host: api.xpeditis.fr
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: backend-service
port:
number: 8080
---
# Certificat SSL automatique avec cert-manager
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: admin@xpeditis.fr
privateKeySecretRef:
name: letsencrypt-prod
solvers:
- http01:
ingress:
class: nginx