---
# IngressRoute с TLS — единственная точка входа для nginx.thedevops.dev
# Весь трафик идёт через TraefikService nginx-weighted
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: nginx-weighted
  namespace: nginx-mcp
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`nginx.thedevops.dev`)
      kind: Rule
      services:
        - name: nginx-weighted
          namespace: nginx-mcp
          kind: TraefikService
  tls:
    secretName: nginx-weighted-tls
---
# HTTP → HTTPS redirect
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: nginx-weighted-http
  namespace: nginx-mcp
spec:
  entryPoints:
    - web
  routes:
    - match: Host(`nginx.thedevops.dev`)
      kind: Rule
      middlewares:
        - name: redirect-https
          namespace: nginx-mcp
      services:
        - name: nginx-mcp
          port: 80