apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: n8n-ingress
  namespace: n8n
  annotations:
    # Use Traefik as the ingress controller (default in k3s)
    kubernetes.io/ingress.class: "traefik"
    # Enable SSL redirect
    traefik.ingress.kubernetes.io/redirect-entry-point: https
    # Optional: enable compression
    traefik.ingress.kubernetes.io/compress: "true"
    cert-manager.io/issuer: prod-issuer
    cert-manager.io/issuer-kind: OriginIssuer
    cert-manager.io/issuer-group: cert-manager.k8s.cloudflare.com
spec:
  tls:
    - hosts:
      - "*.rogi.casa"
      secretName: rogicasa-tls
  rules:
  - host: n8n.rogi.casa
    http:
      paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: n8n
              port:
                number: 80