apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    nodeSelector:
      kubernetes.io/hostname: k3sh0
    providers:
      kubernetesCRD:
        allowCrossNamespace: true
    certResolvers:
      letsencrypt:
        email: admin@t00n.de
        dnsChallenge:
          provider: ionos
          delayBeforeCheck: 60
          resolvers:
            - 1.1.1.1
        storage: /data/acme-ionos.json
    ingressRoute:
      dashboard:
         enabled: true
         matchRule: Host(`traefik.monitor.k8s.t000-n.de`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
         middlewares:
           - name: localipfilter
         entryPoints: ["websecure"]
    env:
      - name: IONOS_API_KEY
        valueFrom:
          secretKeyRef:
            key: apiKey
            name: ionos-api-credentials
    ports:
      web:
        port: 8000
        expose: true
        exposedPort: 80
        nodePort: 32080
      websecure:
        port: 8443
        expose: true
        exposedPort: 443
        nodePort: 32443
        tls:
          enabled: true
          certResolver: "letsencrypt"
    service:
      enabled: true
      single: true
      type: LoadBalancer
      spec:
        externalTrafficPolicy: Local
      externalIPs:
        - 192.168.0.50
        - 192.168.0.51
        - 192.168.0.52
        - 192.168.0.53
    persistence:
      enabled: true
      name: data
      existingClaim: pvc-traefik
      path: /data