add wireguard

infrastructure/external/kustomization.yaml

@@ -9,3 +9,4 @@ resources:
   - omv-s3.ingress.yaml
   - openmediavault.ingress.yaml
   - proxmox.ingress.yaml
+  - wireguard.ingress.yaml

infrastructure/external/wireguard.ingress.yaml

@@ -0,0 +1,38 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: wireguard-ingressroute
+  namespace: external
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: Host(`wireguard.kluster.moll.re`)
+    kind: Rule
+    services:
+    - name: wireguard
+      port: 443
+      scheme: https
+  tls:
+    certResolver: default-tls
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: wireguard
+  namespace: external
+subsets:
+  - addresses:
+      - ip: 192.168.2.1
+    ports:
+      - port: 443
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: wireguard
+  namespace: external
+spec:
+  ports:
+    - port: 443
+      targetPort: 443