k3s/services/matrix/matrix-ingress.yaml
2026-06-21 18:01:24 -04:00

67 lines
1.7 KiB
YAML

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: matrix-ingress
namespace: matrix
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
tls:
- hosts:
- starling.mynest.love
secretName: matrix-tls
rules:
- host: starling.mynest.love
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: tuwunel-svc
port:
number: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: matrix-rtc-ingress
namespace: matrix
annotations:
cert-manager.io/cluster-issuer: "letsencrypt-prod"
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
spec:
tls:
- hosts:
- matrix-rtc.mynest.love
secretName: matrix-rtc-tls
rules:
- host: matrix-rtc.mynest.love
http:
paths:
# 1. Route token generation traffic to the lk-jwt-service
- path: /sfu/get
pathType: Prefix
backend:
service:
name: lk-jwt-svc
port:
number: 8080
- path: /get_token
pathType: Prefix
backend:
service:
name: lk-jwt-svc
port:
number: 8080
# 2. Route all standard traffic and WebSockets to LiveKit
- path: /
pathType: Prefix
backend:
service:
name: livekit-svc
port:
number: 7880