apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ include "stalwart.fullname" . }}
  labels:
    {{- include "stalwart.labels" . | nindent 4 }}
  annotations:
    cert-manager.io/cluster-issuer: prod-cluster-issuer
    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
    nginx.ingress.kubernetes.io/ssl-redirect: "false"
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS"
    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization"
    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-Forwarded-Ssl on;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
spec:
  ingressClassName: nginx
  rules:
  - host: mail.hensen.io
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{ include "stalwart.fullname" . }}
            port:
              number: 8080
  - host: autoconfig.hensen.io
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{ include "stalwart.fullname" . }}
            port:
              number: 8080
  - host: autodiscover.hensen.io
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{ include "stalwart.fullname" . }}
            port:
              number: 8080
  tls:
    - secretName: letsencrypt-prod
      hosts:
        - mail.hensen.io
        - autoconfig.hensen.io
        - autodiscover.hensen.io