---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    io.kubernetes.cri-o.TTY/traefik: "false"
    io.podman.annotations.autoremove/traefik: "FALSE"
    io.podman.annotations.init/traefik: "FALSE"
    io.podman.annotations.label/traefik: type:container_runtime_t
    io.podman.annotations.privileged/traefik: "FALSE"
    io.podman.annotations.publish-all/traefik: "FALSE"
  creationTimestamp: "2022-12-03T15:45:41Z"
  labels:
    app: traefik-pod
  name: traefik-pod
spec:
  hostNetwork: true
  containers:
  - args:
    - --entrypoints.web.address=:80
    - --entrypoints.web.http.redirections.entryPoint.to=websecure
    - --entrypoints.web.http.redirections.entryPoint.scheme=https
    - --entrypoints.websecure.address=:443
    - --certificatesresolvers.myresolver.acme.email=postmaster@nbit.ch
    - --certificatesresolvers.myresolver.acme.storage=/acme.json
    - --certificatesresolvers.myresolver.acme.tlschallenge=true
    - --certificatesresolvers.myresolver.acme.httpChallenge.entrypoint=web
    - --providers.file.directory=/configuration/
    - --providers.file.watch=true
    - --accesslog=true
    #- --log.level=DEBUG
    #- --api.dashboard=true
    #- --api.insecure=true
    image: docker.io/library/traefik:latest
    name: traefik
    securityContext:
      capabilities:
        drop:
        - CAP_MKNOD
        - CAP_AUDIT_WRITE
    volumeMounts:
    - mountPath: /configuration/
      name: home-containers-onyx_pods-traefik-configuration-host-0
    - mountPath: /acme.json
      name: data-traefik-acme.json-host-2
  volumes:
  - hostPath:
      path: /home/containers/onyx_pods/traefik/configuration
      type: Directory
    name: home-containers-onyx_pods-traefik-configuration-host-0
  - hostPath:
      path: /data/traefik/acme.json
      type: File
    name: data-traefik-acme.json-host-2