From e3ae86cd01075915cbb9644a2facd55f2b9e6138 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Thu, 8 Oct 2026 23:57:21 +0200
Subject: [PATCH] feat(streaming): expose seerr and jellyfin publicly

Add prod IngressRoutes for seerr.forust.xyz and jelly.forust.xyz with letsencrypt certificates.
---
 streaming/k8s/routing/certificates.yaml | 39 ++++++++++++++++---------
 streaming/k8s/routing/ingress.yaml      | 34 +++++++++++++++++++++
 2 files changed, 60 insertions(+), 13 deletions(-)

diff --git a/streaming/k8s/routing/certificates.yaml b/streaming/k8s/routing/certificates.yaml
index 2777176..c35f28c 100644
--- a/streaming/k8s/routing/certificates.yaml
+++ b/streaming/k8s/routing/certificates.yaml
@@ -78,16 +78,29 @@ spec:
 #   issuerRef:
 #     name: letsencrypt-prod
 #     kind: ClusterIssuer
-# ---
-# apiVersion: cert-manager.io/v1
-# kind: Certificate
-# metadata:
-#   name: jellyseerr-prod-tls
-#   namespace: streaming
-# spec:
-#   secretName: jellyseerr-prod-tls
-#   dnsNames:
-#     - jellyseerr.forust.xyz
-#   issuerRef:
-#     name: letsencrypt-prod
-#     kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: seerr-prod-tls
+  namespace: streaming
+spec:
+  secretName: seerr-prod-tls
+  dnsNames:
+    - seerr.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: jelly-prod-tls
+  namespace: streaming
+spec:
+  secretName: jelly-prod-tls
+  dnsNames:
+    - jelly.forust.xyz
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
diff --git a/streaming/k8s/routing/ingress.yaml b/streaming/k8s/routing/ingress.yaml
index b2d54c3..7451e31 100644
--- a/streaming/k8s/routing/ingress.yaml
+++ b/streaming/k8s/routing/ingress.yaml
@@ -1,5 +1,39 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
+metadata:
+  name: seerr-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`seerr.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyseerr
+          port: 15055
+  tls:
+    secretName: seerr-prod-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: jelly-prod
+  namespace: streaming
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`jelly.forust.xyz`)
+      kind: Rule
+      services:
+        - name: jellyfin
+          port: 18096
+  tls:
+    secretName: jelly-prod-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
 metadata:
   name: jellyfin-local
   namespace: streaming