apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: prowlarr
  namespace: media
  annotations:
    kubernetes.io/ingress.class: traefik-internal
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`prowlarr.{{ DOMAIN }}`)
      kind: Rule
      services:
        - name: prowlarr
          port: 9696
  tls:
    secretName: prowlarr-tls-secret