---
# clash - clash.xiongxiao.me (支持 WebSocket)
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: clash-https
  namespace: default
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`clash.xiongxiao.me`)
      kind: Rule
      services:
        - name: clash-external
          port: 9090
  tls:
    certResolver: letsencrypt

---
# clash 服务 (端口 9090, 本地)
apiVersion: v1
kind: Service
metadata:
  name: clash-external
  namespace: default
spec:
  type: ClusterIP
  ports:
  - port: 9090
    targetPort: 9090
    protocol: TCP
    name: http
---
apiVersion: v1
kind: Endpoints
metadata:
  name: clash-external
  namespace: default
subsets:
- addresses:
  - ip: 121.4.112.18
  ports:
  - port: 9090
    name: http