summaryrefslogtreecommitdiff
path: root/f3s
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-02-06 09:10:47 +0200
committerPaul Buetow <paul@buetow.org>2026-02-06 09:10:47 +0200
commite52087185d5764d600d8a9a94f35c368fbbe31d3 (patch)
tree2ef841b89543b0165483c2809440cf2013758bca /f3s
parentb994a8ebc1f164be107351ae6e2539b069013efe (diff)
Add Traefik ingresses for jellyfin (external and LAN with TLS)
Co-authored-by: Cursor <cursoragent@cursor.com>
Diffstat (limited to 'f3s')
-rw-r--r--f3s/jellyfin/helm-chart/templates/ingress.yaml49
1 files changed, 46 insertions, 3 deletions
diff --git a/f3s/jellyfin/helm-chart/templates/ingress.yaml b/f3s/jellyfin/helm-chart/templates/ingress.yaml
index ed01eca..2a76ba5 100644
--- a/f3s/jellyfin/helm-chart/templates/ingress.yaml
+++ b/f3s/jellyfin/helm-chart/templates/ingress.yaml
@@ -1,3 +1,46 @@
-# Jellyfin is exposed via NodePorts 30096 and 30920
-# relayd on frontend proxies directly to these ports, bypassing Traefik
-# This avoids double reverse-proxy complexity and certificate chain issues
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: jellyfin-ingress
+ namespace: services
+ annotations:
+ spec.ingressClassName: traefik
+ traefik.ingress.kubernetes.io/router.entrypoints: web
+spec:
+ rules:
+ - host: jellyfin.f3s.buetow.org
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: jellyfin-server
+ port:
+ number: 8096
+---
+# LAN Ingress for jellyfin.f3s.lan.buetow.org with TLS
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ name: jellyfin-ingress-lan
+ namespace: services
+ annotations:
+ spec.ingressClassName: traefik
+ traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+spec:
+ tls:
+ - hosts:
+ - jellyfin.f3s.lan.buetow.org
+ secretName: f3s-lan-tls
+ rules:
+ - host: jellyfin.f3s.lan.buetow.org
+ http:
+ paths:
+ - path: /
+ pathType: Prefix
+ backend:
+ service:
+ name: jellyfin-server
+ port:
+ number: 8096