apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: readarr
  namespace: media
  annotations:
    kubernetes.io/ingress.class: traefik-internal
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`readarr.{{ DOMAIN }}`)
      kind: Rule
      services:
        - name: readarr
          port: 8787
  tls:
    secretName: readarr-tls-secret