apiVersion: traefik.containo.us/v1alpha1 kind: IngressRoute metadata: name: sonarr namespace: media annotations: kubernetes.io/ingress.class: traefik-internal spec: entryPoints: - websecure routes: - match: Host(`sonarr.{{ DOMAIN }}`) kind: Rule services: - name: sonarr port: 8989 tls: secretName: sonarr-tls-secret