---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    ingress.kubernetes.io/ssl-redirect: "true"
    ingress.kubernetes.io/force-hsts: "true"
    ingress.kubernetes.io/hsts-max-age: "315360000"
    ingress.kubernetes.io/hsts-preload: "true"
  labels:
    app: tobru-ch
  name: ghost
  namespace: tobru-ch
spec:
  rules:
  - host: tobru.ch
    http:
      paths:
      - path: /.well-known/webfinger
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 8080
      - path: /.well-known/nodeinfo
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 8080
      - path: /.well-known/host-meta
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 8080
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 2368
  - host: www.tobru.ch
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 2368
  - host: tobrunet.ch
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 2368
  - host: www.tobrunet.ch
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ghost
            port:
              number: 2368
  tls:
  - hosts:
    - tobru.ch
    - www.tobru.ch
    - tobrunet.ch
    - www.tobrunet.ch
    secretName: ghost-ingress-cert