---
apiVersion: v1
kind: Namespace
metadata:
  name: traefik

---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: cloudflare
  namespace: traefik
spec:
  acme: 
    server: https://acme-v02.api.letsencrypt.org/directory
    email: jafner425@gmail.com
    privateKeySecretRef:
      name: cloudflare-key
    solvers:
      - dns01: 
          cloudflare:
            apiTokenSecretRef:
              name: cloudflare-token-jafner-net-dns-edit
              key: token

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: traefik-k3s-jafner-net
  namespace: traefik
spec: 
  secretName: traefik-k3s-jafner-net
  dnsNames:
    - "traefik.k3s.jafner.net"
  issuerRef:
    name: cloudflare
    kind: Issuer


# ---
# apiVersion: traefik.containo.us/v1alpha1
# kind: IngressRoute
# metadata:
#   name: traefik-dashboard
#   namespace: traefik
# spec: 
#   entryPoints: ["websecure"]
#   routes:
#   tls:
#     certResolver: cloudflare

# ---
# apiVersion: v1
# kind: Service
# metadata:
#   name: traefik-dashboard
#   namespace: traefik
# spec:
#   selector:
#     app.kubernetes.io/name: traefik
#   type: ClusterIP
#   ports:
#   - name: http
#     port: 80
#     targetPort: 9000

# ---
# apiVersion: networking.k8s.io/v1
# kind: Ingress
# metadata:
#   name: traefik-dashboard
#   namespace: traefik
# spec:
#   tls:
#   - hosts:
#       - traefik.k3s.jafner.net
#     secretName: cloudflare-token-jafner-net-dns-edit
#   rules:
#   - host: traefik.k3s.jafner.net
#     http:
#       paths:
#       - path: /
#         pathType: Prefix
#         backend:
#           service:
#             name: traefik-dashboard
#             port:
#               number: 80