apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: traefik
  namespace: traefik
spec:
  chart:
    spec:
      chart: traefik
      version: 27.x 
      sourceRef:
        kind: HelmRepository
        name: traefik
        namespace: flux-system
  interval: 15m
  timeout: 5m
  releaseName: traefik
  values:
    ingressRoute:
      dashboard:
        matchRule: Host(`server.michaelthomson.dev`)
        entryPoints: ["websecure"]
        middlewares:
          - name: authentik
        tls:
          secretName: letsencrypt-wildcard-cert-michaelthomson.dev
          domains:
            - main: server.michaelthomson.dev
    ports:
      gitea-ssh:
        port: 55522
        expose:
          default: true
      wireguard-udp:
        port: 51822
        protocol: UDP
        expose:
          default: true

    service:
      annotations: 
        metallb.universe.tf/loadBalancerIPs: 192.168.2.200