apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: wireguard-ingressroute
  namespace: external
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`wireguard.kluster.moll.re`)
    kind: Rule
    services:
    - name: wireguard
      port: 443
      scheme: https
  tls:
    certResolver: default-tls
---
apiVersion: v1
kind: Endpoints
metadata:
  name: wireguard
  namespace: external
subsets:
  - addresses:
      - ip: 192.168.2.1
    ports:
      - port: 443
---
apiVersion: v1
kind: Service
metadata:
  name: wireguard
  namespace: external
spec:
  ports:
    - port: 443
      targetPort: 443