---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-production"
    external-dns/is-public: "true"
    external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOMAIN}"
    traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
    hajimari.io/appName: "Firefly III"
    hajimari.io/enable: "true"
    hajimari.io/icon: "piggy-bank"
    hajimari.io/group: "Personal services" 
  name: firefly-iii
  namespace: default
spec:
  rules:
  - host: firefly.${SECRET_DOMAIN}
    http:
      paths:
      - backend:
          service:
            name: firefly-iii
            port:
              number: 8080
        path: /
        pathType: Prefix
  tls:
    - hosts:
        - "firefly.${SECRET_DOMAIN}"
      secretName: "firefly-tls"