From 50a8532d98df9600f47f5c4ff1d316c74ec0f165 Mon Sep 17 00:00:00 2001
From: j <repobase@j7b.net>
Date: Sat, 12 Jul 2025 23:12:51 +1000
Subject: [PATCH] Add ingress for vaultwarden

---
 deployments/home-server/vaultwarden.yaml | 27 ++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/deployments/home-server/vaultwarden.yaml b/deployments/home-server/vaultwarden.yaml
index 98f8da0..8ddd2ee 100644
--- a/deployments/home-server/vaultwarden.yaml
+++ b/deployments/home-server/vaultwarden.yaml
@@ -82,3 +82,30 @@ spec:
         - name: vaultwarden-data
           persistentVolumeClaim:
             claimName: vaultwarden-pvc
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vaultwarden
+  namespace: home-server
+  annotations:
+    external-dns.alpha.kubernetes.io/hostname: vault.hxme.net
+    nginx.ingress.kubernetes.io/server-snippet: |
+      add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
+spec:
+  tls:
+    - hosts:
+        - vault.hxme.net
+      secretName: wildcard-hxme-net
+  rules:
+    - host: vault.hxme.net
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: vaultwarden
+                port:
+                  number: 80