From 0c2f3f2e836e1c43a32540b200fc78439f63ffbd Mon Sep 17 00:00:00 2001
From: Wolfgang Hottgenroth <wolfgang.hottgenroth@icloud.com>
Date: Sat, 29 Nov 2025 23:09:03 +0100
Subject: [PATCH] new mtls approach 4

---
 deployment/ingress.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/deployment/ingress.yaml b/deployment/ingress.yaml
index 56fbb1c..c3dae69 100644
--- a/deployment/ingress.yaml
+++ b/deployment/ingress.yaml
@@ -40,4 +40,23 @@ spec:
       services:
         - name: ui
           port: 80
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: api
+spec:
+  entryPoints:
+    - websecure
+  tls:
+    secretName: homea2-cert
+    options:
+      name: mtls-required
+      namespace: homea2
+  routes:
+    - match: Host(`homea2-api.hottis.de`)
+      kind: Rule
+      services:
+        - name: api
+          port: 80