From 4e5098eb8e779434b3909668635fa905482ee565 Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Sat, 17 Jan 2026 22:14:48 +0100
Subject: [PATCH] chore: Add IngressRoute for Traefik routing

---
 .../virtualinsanity-ingressroute.yaml         | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 virtualinsanity/virtualinsanity-ingressroute.yaml

diff --git a/virtualinsanity/virtualinsanity-ingressroute.yaml b/virtualinsanity/virtualinsanity-ingressroute.yaml
new file mode 100644
index 0000000..a44d96b
--- /dev/null
+++ b/virtualinsanity/virtualinsanity-ingressroute.yaml
@@ -0,0 +1,23 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: virtualinsanity-ingressroute
+  namespace: wordpress
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`virtualinsanity.giaco.net`)
+      kind: Rule
+      services:
+        - name: virtualinsanity-wordpress-svc
+          port: 80
+      middlewares: # Middleware reference moved here
+        - name: wordpress-security-headers
+          namespace: wordpress
+  tls:
+    # Placeholder for cert-manager managed secret.
+    # You'll need to ensure cert-manager is configured to issue certificates for virtualinsanity.giaco.net
+    # and that it creates a secret named 'virtualinsanity-tls-secret'.
+    secretName: virtualinsanity-tls-secret 
+    # certResolver: myresolver # Uncomment and configure if using cert-manager with a specific resolver
\ No newline at end of file