# CloudNest Ingress 路由 + Let's Encrypt 自动证书
# 1) 将所有 yourdomain.com 替换成你的真实域名
# 2) 提前按部署指南 5.5 启用 certResolver: letsencrypt
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: strip-prefix
  namespace: cloudnest
spec:
  stripPrefix:
    prefixes:
      - /auth
      - /files
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: cloudnest-ingress
  namespace: cloudnest
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`api.yourdomain.com`) && PathPrefix(`/auth`)
      kind: Rule
      middlewares:
        - name: strip-prefix
      services:
        - name: auth-service
          port: 8081
    - match: Host(`api.yourdomain.com`) && PathPrefix(`/files`)
      kind: Rule
      middlewares:
        - name: strip-prefix
      services:
        - name: file-service
          port: 8082
  tls:
    certResolver: letsencrypt
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: minio-console
  namespace: cloudnest
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`minio.yourdomain.com`)
      kind: Rule
      services:
        - name: minio
          port: 9001
  tls:
    certResolver: letsencrypt