# /infrastructure/controllers/traefik/values.yaml
logs:
  access:
    enabled: true
ingressRoute:
  dashboard:
    enabled: true
    matchRule: Host(`traefik.example.com`)
    entryPoints: ["websecure"]
    middlewares:
      - name: "auth-forwardauth-authelia@kubernetescrd"
providers:
  kubernetesCRD:
    allowCrossNamespace: true
persistence:
  enabled: true
  storageClass: retain-local-path
ports:
  websecure:
    tls:
      enabled: true
  web:
    redirectTo:
      port: websecure
service:
  spec:
    externalTrafficPolicy: Local
tlsStore:
  default:
    defaultCertificate:
      secretName: wildcard-nmsny-dev-tls