---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: transmission-with-vpn
  namespace: plex-and-tools
  labels:
    app: transmission-with-vpn
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`transmission.example.org`)
      kind: Rule
      services:
        - name: transmission-with-vpn
          port: http
      middlewares:
        - name: security
          namespace: traefik
        - name: authentik-proxy
          namespace: authentik

    - match: Host(`transmission.example.org`) && PathPrefix(`/outpost.goauthentik.io/`)
      priority: 15
      kind: Rule
      services:
        - name: authentik-proxy
          namespace: authentik
          port: http
      middlewares:
        - name: security
          namespace: traefik

  tls:
    secretName: transmission.example.org
    options:
      name: tls-security
      namespace: traefik