traefik:

  global:
    checkNewVersion: false

  installCRDs: true

  additionalArguments:
  - "--entrypoints.web.forwardedHeaders.trustedIPs=192.168.1.2/32"

  api:
    dashboard: true
    insecure: true

  service:
    type: LoadBalancer
    annotations:
      io.cilium/lb-ipam-ips: "192.168.0.2"

  providers:
    kubernetesCRD:
      enabled: true
      allowCrossNamespace: true
    kubernetesIngress:
      enabled: false
    kubernetesGateway:
      enabled: true

  resources:
    requests:
      cpu: "100m"
      memory: "128Mi"
    limits:
      cpu: "500m"
      memory: "512Mi"

  deployment:
    replicas: 2

  metrics:
    prometheus:
      enabled: true

  gateway:
    listeners:
      web:
        namespacePolicy:
          from: All

  extraObjects:
    - apiVersion: gateway.networking.k8s.io/v1
      kind: HTTPRoute
      metadata:
        name: traefik-dashboard
        namespace: traefik
      spec:
        parentRefs:
          - name: traefik-gateway
            sectionName: web
        hostnames:
          - "traefik.noxxos.nl"
        rules:
          - matches:
              - path: { type: PathPrefix, value: /dashboard/ }
              - path: { type: PathPrefix, value: /api }
            backendRefs:
              - group: traefik.io
                kind: TraefikService
                name: api@internal