From f882fbff417f57a5f41eec4053e8ce6f60c947e9 Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Tue, 19 May 2026 08:42:37 +0000
Subject: [PATCH] feat: deploy Bitwarden self-hosted in security namespace

---
 deployments/bitwarden/bitwarden-ingress.yaml | 26 ++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 deployments/bitwarden/bitwarden-ingress.yaml

diff --git a/deployments/bitwarden/bitwarden-ingress.yaml b/deployments/bitwarden/bitwarden-ingress.yaml
new file mode 100644
index 0000000..0c8d4c5
--- /dev/null
+++ b/deployments/bitwarden/bitwarden-ingress.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: bitwarden
+  namespace: security
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - bitwarden.khalisio.com
+      secretName: bitwarden-tls
+  rules:
+    - host: bitwarden.khalisio.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: bitwarden
+                port:
+                  number: 80