separate 80/8080 and 443/8443

Signed-off-by: Kingdon Barrett <[email protected]>

Author: kingdonb

apps/routers/urbit-ships/socryx-topled-ingressroute.yaml

@@ -6,7 +6,6 @@ metadata:
 spec:
   entryPoints:
   - web
-  - webnonpriv
   # - websecure
   routes:
   - kind: Rule
@@ -17,6 +16,23 @@ spec:
       namespace: traefik-staging
       port: 80
       # scheme: https
+  # tls:
+  #   certResolver: prodresolver
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: socryx-topled
+  namespace: traefik-staging
+spec:
+  entryPoints:
+  - webnonpriv
+  # - websecure
+  routes:
+  - kind: Rule
+    match: Host(`socryx-topled.arvo.network`)
+    services:
     - kind: Service
       name: socryx-topled
       namespace: traefik-staging
@@ -33,13 +49,27 @@ metadata:
 spec:
   entryPoints:
     - websecure
-    - websecnonpriv
   routes:
   - match: HostSNI(`socryx-topled.arvo.network`)
     services:
     - name: socryx-topled
       namespace: traefik-staging
       port: 443
+  tls:
+    passthrough: true
+
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRouteTCP
+metadata:
+  name: socryx-topled
+  namespace: traefik-staging
+spec:
+  entryPoints:
+    - websecnonpriv
+  routes:
+  - match: HostSNI(`socryx-topled.arvo.network`)
+    services:
     - name: socryx-topled
       namespace: traefik-staging
       port: 8443