wireguard udp and protect wg dash

traefik/helmrelease-traefik.yaml

@@ -757,6 +757,10 @@ spec:
       gitea-ssh:
         port: 55522
         expose: true
+      wireguard-udp:
+        port: 51820
+        expose: true
+        protocol: UDP
 
     # -- TLS Options are created as TLSOption CRDs
     # https://doc.traefik.io/traefik/https/tls/#tls-options

wg-easy/ingress-route-tcp.yaml

@@ -0,0 +1,12 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRouteUDP
+metadata:
+  name: wireguard-udp
+  namespace: wg-easy
+spec:
+  entryPoints:
+    - wireguard-udp
+  routes:
+  - services:
+    - name: wg-easy
+      port: 51820

wg-easy/ingress.yaml

@@ -5,6 +5,7 @@ metadata:
   namespace: wg-easy
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
     traefik.ingress.kubernetes.io/router.tls: "true"
 spec:
   rules: