ingress

.gitignore

@@ -0,0 +1,2 @@
+cert/tls.key
+cert/tls.crt

cert/create.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+kubectl create secret tls zigbee2mqtt-cert -n homea --cert=tls.crt --key=tls.key
+

deployment/deploy.yml

@@ -35,6 +35,9 @@ spec:
           envFrom:
             - configMapRef:
                 name: zigbee2mqtt-config
+          ports:
+            - containerPort: 8080
+              protocol: TCP
       volumes:
         - name: zigbee2mqtt
           persistentVolumeClaim:

deployment/ingress.yml

@@ -0,0 +1,36 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: zigbee2mqtt
+spec:
+  type: ClusterIP
+  selector:
+    app: zigbee2mqtt
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8080
+      targetPort: 8080
+---       
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: zigbee2mqtt
+spec:
+  ingressClassName: traefik-internal
+  tls:
+    - hosts:
+        - zigbee2mqtt.hottis.de
+      secretName: zigbee2mqtt-cert
+  rules:
+    - host: zigbee2mqtt.hottis.de
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service: 
+                name: zigbee2mqtt
+                port: 
+                  number: 8080