apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: virtualinsanity-ingressroute
  namespace: wordpress
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`virtualinsanity.giaco.net`)
      kind: Rule
      services:
        - name: virtualinsanity-wordpress-svc
          port: 80
      middlewares: # Middleware reference moved here
        - name: wordpress-security-headers
          namespace: wordpress
  tls:
    # Placeholder for cert-manager managed secret.
    # You'll need to ensure cert-manager is configured to issue certificates for virtualinsanity.giaco.net
    # and that it creates a secret named 'virtualinsanity-tls-secret'.
    secretName: virtualinsanity-tls-secret 
    # certResolver: myresolver # Uncomment and configure if using cert-manager with a specific resolverapiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: virtualinsanity-ingress
  namespace: wordpress
  annotations:
    kubernetes.io/ingress.class: "traefik"
spec:
  rules:
    - host: virtualinsanity.giaco.net
      http:
        paths:
          - path: /
            backend:
              serviceName: virtualinsanity-wordpress
              servicePort: 80