apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: netbird-ingress
  namespace: netbird
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production
    kubernetes.io/ingress.class: nginx-external
    acme.cert-manager.io/http01-edit-in-place: "true"
spec:
  tls:
  - hosts:
    - netbird.halis.io
    secretName: netbird-halis-io-tls
  ingressClassName: nginx-external
  rules:
  - host: netbird.halis.io
    http:
      paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: netbird-svc
              port:
                number: 80
        - path: /api
          pathType: Prefix
          backend:
            service:
              name: netbird-management-svc
              port:
                number: 443
        - path: /relay
          pathType: Prefix
          backend:
            service:
              name: netbird-relay-svc
              port:
                number: 33080
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: netbird-grpc-ingress
  namespace: netbird
  annotations:
    kubernetes.io/ingress.class: nginx-external
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
spec:
  tls:
  - hosts:
    - netbird.halis.io
    secretName: netbird-halis-io-tls
  ingressClassName: nginx-external
  rules:
  - host: netbird.halis.io
    http:
      paths:
        - path: "/management.ManagementService"
          pathType: Prefix
          backend:
            service:
              name: netbird-management-svc
              port:
                number: 443
        - path: "/signalexchange.SignalExchange"
          pathType: Prefix
          backend:
            service:
              name: netbird-signal-svc
              port:
                number: 10000