apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: pelican-route
  namespace: pelican
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: gateway-internal
      namespace: envoy-gateway
      sectionName: pelican
  hostnames:
    - "pelican.jsme.be"
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      filters:
        - type: RequestHeaderModifier
          requestHeaderModifier:
            set:
              - name: X-Forwarded-Host
                value: "pelican.jsme.be"
              - name: X-Forwarded-Proto
                value: https
        - type: ResponseHeaderModifier
          responseHeaderModifier:
            set:
              - name: Strict-Transport-Security
                value: "max-age=31536000; includeSubDomains"
              - name: X-Content-Type-Options
                value: nosniff
              - name: X-Frame-Options
                value: SAMEORIGIN
              - name: Referrer-Policy
                value: strict-origin-when-cross-origin
              - name: Permissions-Policy
                value: "camera=(), microphone=(), geolocation=(), payment=()"
              - name: Content-Security-Policy
                value: "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://gravatar.com https://www.gravatar.com; font-src 'self' data:; connect-src 'self' https://wings.jsme.be wss://wings.jsme.be ws: wss:; frame-ancestors 'self'"
      backendRefs:
        - name: pelican
          port: 80
          kind: Service
          group: ""
          weight: 1