feat(ingress): Move admin panel to internal only

manifests/ingress.yaml

@@ -6,6 +6,8 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
     kubernetes.io/ingress.class: nginx-external
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      rewrite ^/admin(/?)$ https://bitwarden.halis.io/$1 permanent;
     acme.cert-manager.io/http01-edit-in-place: "true"
 spec:
   tls:

manifests/internal-ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vaultwarden-internal-ingress
+  namespace: vaultwarden
+spec:
+  ingressClassName: nginx-internal
+  rules:
+  - host: bitwarden.entos
+    http:
+      paths:
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: vaultwarden-svc
+              port:
+                number: 80

manifests/kustomization.yaml

@@ -8,5 +8,6 @@ resources:
   - database-backup.yaml
   - service.yaml
   - ingress.yaml
+  - internal-ingress.yaml
   - pvc.yaml
   - deployment.yaml