From e44858053c6aee30d37d00379cc5dbf888385148 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Tue, 19 May 2026 08:48:14 +0000
Subject: [PATCH] feat: deploy Bitwarden vault to security namespace

---
 deployments/bitwarden/ingress.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 deployments/bitwarden/ingress.yaml

diff --git a/deployments/bitwarden/ingress.yaml b/deployments/bitwarden/ingress.yaml
new file mode 100644
index 0000000..1976d66
--- /dev/null
+++ b/deployments/bitwarden/ingress.yaml
@@ -0,0 +1,21 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: bitwarden
+  namespace: security
+  annotations:
+    kubernetes.io/ingress.class: traefik
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`bitwarden.khalisio.com`)
+      kind: Rule
+      services:
+        - name: bitwarden
+          port: 80
+  tls:
+    secretName: bitwarden-tls
+    options:
+      name: default
+      kind: ClusterEntrypoint