apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: icyphox.sh
  namespace: default
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      if ($request_uri !~ "^/.well-known/webfinger") {
        return 301 https://anirudh.fi$request_uri;
      }
spec:
  ingressClassName: nginx
  tls:
  - hosts:
    - icyphox.sh
    secretName: icyphox-sh-tls
  rules:
  - host: icyphox.sh
    http:
      paths:
      - path: /.well-known/webfinger
        pathType: ImplementationSpecific
        backend:
          service:
            name: honk
            port:
              number: 8080
  - host: icyphox.sh
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: garage
            port:
              number: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: anirudh.fi
  namespace: default
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
  ingressClassName: nginx
  tls:
  - hosts:
    - anirudh.fi
    secretName: anirudh-fi-tls
  rules:
  - host: anirudh.fi
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: garage
            port:
              number: 80