apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: gitea
spec:
  ingressClassName: tailscale
  defaultBackend:
    service:
      name: gitea-release-http
      port:
        # Route through Anubis anti-crawler sidecar instead of directly to Gitea
        name: anubis
  tls:
    - hosts:
        - gitea