# Gitea Ingress Configuration
# Routes external traffic to Gitea service for web UI and Git HTTP access
#
# Prerequisites:
#   - Gitea must be deployed in the 'gitea' namespace
#   - Ingress controller must be installed (nginx, traefik, etc.)
#   - For HTTPS: cert-manager with a ClusterIssuer named 'letsencrypt-prod' or 'local-ca-issuer'

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: gitea-ingress
  namespace: gitea
  labels:
    app.kubernetes.io/name: gitea
    app.kubernetes.io/component: ingress
    app.kubernetes.io/part-of: bakery-ia-cicd
  annotations:
    # For nginx ingress controller
    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
    # For traefik ingress controller
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
    # For TLS with cert-manager (uncomment for HTTPS)
    # cert-manager.io/cluster-issuer: "local-ca-issuer"
spec:
  ingressClassName: nginx
  # Uncomment for HTTPS
  # tls:
  #   - hosts:
  #       - gitea.bakery-ia.local
  #     secretName: gitea-tls
  rules:
    - host: gitea.bakery-ia.local
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: gitea-http
                port:
                  number: 3000