From 9932e8d8f7037b6f7b124b21fbc4cb683cfa9884 Mon Sep 17 00:00:00 2001
From: Remy Moll <me@moll.re>
Date: Tue, 25 Nov 2025 10:51:59 +0100
Subject: [PATCH] websockets babyy

---
 apps/audiobookshelf/ingress.yaml | 19 ++++++++++++++++++-
 apps/kitchenowl/ingress.yaml     |  3 ++-
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/apps/audiobookshelf/ingress.yaml b/apps/audiobookshelf/ingress.yaml
index 8419a4b..18a746f 100644
--- a/apps/audiobookshelf/ingress.yaml
+++ b/apps/audiobookshelf/ingress.yaml
@@ -9,9 +9,26 @@ spec:
   routes:
   - match: Host(`audiobookshelf.kluster.moll.re`)
     kind: Rule
+    middlewares:
+    - name: audiobookshelf
     services:
     - name: audiobookshelf-web
       port: 80
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+
+---
+
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: audiobookshelf
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: "https"
+      Upgrade: "websocket"
+      Connection: "Upgrade"
+    customResponseHeaders:
+      X-Forwarded-For: "true"
diff --git a/apps/kitchenowl/ingress.yaml b/apps/kitchenowl/ingress.yaml
index 7c4ae5a..6248fb2 100644
--- a/apps/kitchenowl/ingress.yaml
+++ b/apps/kitchenowl/ingress.yaml
@@ -26,5 +26,6 @@ spec:
   headers:
     customRequestHeaders:
       X-Forwarded-Proto: "https"
-      # enable websockets
       Upgrade: "websocket"
+    customResponseHeaders:
+      X-Forwarded-For: "true"