From a407671f4e98e064a2ff1f7d7baa20db4026be1f Mon Sep 17 00:00:00 2001
From: chemavx <chemavx@chemavx.xyz>
Date: Thu, 26 Mar 2026 17:06:23 +0000
Subject: [PATCH] Add monitoring/ingresses.yaml

---
 monitoring/ingresses.yaml | 63 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 monitoring/ingresses.yaml

diff --git a/monitoring/ingresses.yaml b/monitoring/ingresses.yaml
new file mode 100644
index 0000000..8e50bcc
--- /dev/null
+++ b/monitoring/ingresses.yaml
@@ -0,0 +1,63 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    meta.helm.sh/release-name: kube-prometheus-stack
+    meta.helm.sh/release-namespace: monitoring
+    traefik.ingress.kubernetes.io/router.middlewares: authentik-authentik-forward-auth@kubernetescrd,default-rate-limit@kubernetescrd
+  labels:
+    app.kubernetes.io/instance: kube-prometheus-stack
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: grafana
+    app.kubernetes.io/version: 12.4.1
+    helm.sh/chart: grafana-11.3.3
+  name: kube-prometheus-stack-grafana
+  namespace: monitoring
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: grafana.chemavx.xyz
+    http:
+      paths:
+      - backend:
+          service:
+            name: kube-prometheus-stack-grafana
+            port:
+              number: 80
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - grafana.chemavx.xyz
+    secretName: grafana-tls
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"networking.k8s.io/v1","kind":"Ingress","metadata":{"annotations":{"cert-manager.io/cluster-issuer":"letsencrypt-prod"},"name":"uptime-kuma","namespace":"monitoring"},"spec":{"ingressClassName":"traefik","rules":[{"host":"uptime.chemavx.xyz","http":{"paths":[{"backend":{"service":{"name":"uptime-kuma","port":{"number":3001}}},"path":"/","pathType":"Prefix"}]}}],"tls":[{"hosts":["uptime.chemavx.xyz"],"secretName":"uptime-kuma-tls"}]}}
+
+      '
+    traefik.ingress.kubernetes.io/router.middlewares: authentik-authentik-forward-auth@kubernetescrd,default-rate-limit@kubernetescrd
+  name: uptime-kuma
+  namespace: monitoring
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: uptime.chemavx.xyz
+    http:
+      paths:
+      - backend:
+          service:
+            name: uptime-kuma
+            port:
+              number: 3001
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - uptime.chemavx.xyz
+    secretName: uptime-kuma-tls
+