From 3e0b465a20262b05b0a5c998ffa08303665051b2 Mon Sep 17 00:00:00 2001
From: Claude AI <claude@thedevops.dev>
Date: Mon, 5 Jan 2026 11:54:28 +0000
Subject: [PATCH] feat(loki): Add ingress for loki.thedevops.dev with TLS

---
 apps/loki/ingress.yaml | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 apps/loki/ingress.yaml

diff --git a/apps/loki/ingress.yaml b/apps/loki/ingress.yaml
new file mode 100644
index 0000000..fd2f49e
--- /dev/null
+++ b/apps/loki/ingress.yaml
@@ -0,0 +1,36 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: loki
+  namespace: loki
+  annotations:
+    # Traefik annotations
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    
+    # Let's Encrypt TLS certificate
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    
+    # Basic authentication for security
+    # Generate password: htpasswd -nb admin your-password | base64
+    traefik.ingress.kubernetes.io/router.middlewares: loki-basic-auth@kubernetescrd
+    
+    # Additional headers for Loki
+    traefik.ingress.kubernetes.io/custom-request-headers: "X-Scope-OrgID:tenant1"
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - loki.thedevops.dev
+      secretName: loki-tls
+  rules:
+    - host: loki.thedevops.dev
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: loki
+                port:
+                  number: 3100