# =============================================================================
# PLACEHOLDERS:
#   <SERVICE>       - listener/route name (e.g. jellyfin)
#   <NAMESPACE>     - namespace the service runs in (e.g. jellyfin)
#   <HOSTNAME>      - full hostname (e.g. jellyfin.jsme.be)
#   <BACKEND_SVC>   - Kubernetes Service name (e.g. jellyfin)
#   <BACKEND_PORT>  - port the Service exposes (e.g. 8096)
# =============================================================================
# apiVersion: gateway.networking.k8s.io/v1
# kind: HTTPRoute
# metadata:
#   name: <SERVICE>-route
#   namespace: <NAMESPACE>
# spec:
#   parentRefs:
#     - group: gateway.networking.k8s.io
#       kind: Gateway
#       name: gateway-internal
#       namespace: envoy-gateway
#       sectionName: <SERVICE>
#     # - group: gateway.networking.k8s.io    # uncomment if publicly accessible
#     #   kind: Gateway
#     #   name: gateway-public
#     #   namespace: envoy-gateway
#     #   sectionName: <SERVICE>
#   hostnames:
#     - "<HOSTNAME>"
#   rules:
#     - filters:
#         - type: RequestHeaderModifier
#           requestHeaderModifier:
#             set:
#               - name: X-Forwarded-Host
#                 value: "<HOSTNAME>"
#               - name: X-Forwarded-Proto
#                 value: https
#         - type: ResponseHeaderModifier
#           responseHeaderModifier:
#             set:
#               - name: Strict-Transport-Security
#                 value: "max-age=31536000; includeSubDomains"
#               - name: X-Content-Type-Options
#                 value: nosniff
#               - name: X-Frame-Options
#                 value: SAMEORIGIN
#               - name: Referrer-Policy
#                 value: strict-origin-when-cross-origin
#               - name: Permissions-Policy
#                 value: "camera=(), microphone=(), geolocation=(), payment=()"
#       backendRefs:
#         - name: <BACKEND_SVC>
#           port: <BACKEND_PORT>
#           kind: Service
# ---
# # Optional: only needed if you need to override body size limits
# # Remove this section if not needed
# apiVersion: gateway.nginx.org/v1alpha1
# kind: ClientSettingsPolicy
# metadata:
#   name: <SERVICE>-client-settings
#   namespace: <NAMESPACE>
# spec:
#   targetRef:
#     group: gateway.networking.k8s.io
#     kind: HTTPRoute
#     name: <SERVICE>-route
#   body:
#     maxSize: 100m  # adjust as needed, use "0" for unlimited