{{- if .Values.ingress.enabled }}
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ .Release.Name }}
  annotations:
    external-dns.alpha.kubernetes.io/target: omegamaestro.{{ .Values.ingress.domain }}
    cert-manager.io/cluster-issuer: {{ .Values.ingress.issuer }}
    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
    {{- if .Values.ingress.geoip }}
    nginx.ingress.kubernetes.io/server-snippet: |
      if ($lan = yes) { set $allowed_country yes; }
      if ($allowed_country = no) { return 451; }
    {{- end }}
spec:
  ingressClassName: {{ .Values.ingress.class }}
  tls:
  - hosts:
    - {{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}
    secretName: {{ .Release.Name }}-tls
  rules:
  - host: "{{ .Values.ingress.subdomain }}.{{ .Values.ingress.domain }}"
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: "{{ .Release.Name }}-{{ .Values.service.name }}"
            port:
              name: {{ .Values.service.name }}
{{- end }}