apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: virtualinsanity-ingressroute
  namespace: wordpress
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`virtualinsanity.giaco.net`)
      kind: Rule
      services:
        - name: virtualinsanity-wordpress-svc
          port: 80
      middlewares: # Middleware reference moved here
        - name: wordpress-security-headers
          namespace: wordpress
  tls:
    # Placeholder for cert-manager managed secret.
    # You'll need to ensure cert-manager is configured to issue certificates for virtualinsanity.giaco.net
    # and that it creates a secret named 'virtualinsanity-tls-secret'.
    secretName: virtualinsanity-tls-secret 
    # certResolver: myresolver # Uncomment and configure if using cert-manager with a specific resolver