apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: jellyfin-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`jellyfin.workstation.internal`)
      kind: Rule
      services:
        - name: jellyfin
          port: 18096
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: qbittorrent-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`qbittorrent.workstation.internal`)
      kind: Rule
      services:
        - name: qbittorrent
          port: 18180
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: sonarr-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`sonarr.workstation.internal`)
      kind: Rule
      services:
        - name: sonarr
          port: 18989
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: radarr-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`radarr.workstation.internal`)
      kind: Rule
      services:
        - name: radarr
          port: 17878
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: prowlarr-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`prowlarr.workstation.internal`)
      kind: Rule
      services:
        - name: prowlarr
          port: 19696
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: jellyseerr-local
  namespace: streaming
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`jellyseerr.workstation.internal`)
      kind: Rule
      services:
        - name: jellyseerr
          port: 15055
  tls:
    secretName: internal-wildcard-tls