apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: proxmox-route
  namespace: proxmox
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: gateway-internal
      namespace: envoy-gateway
      sectionName: proxmox
  hostnames:
    - "proxmox.jsme.be"
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      filters:
        - type: RequestHeaderModifier
          requestHeaderModifier:
            set:
              - name: X-Forwarded-Host
                value: "proxmox.jsme.be"
              - name: X-Forwarded-Proto
                value: https
        - type: ResponseHeaderModifier
          responseHeaderModifier:
            set:
              - name: Strict-Transport-Security
                value: "max-age=31536000; includeSubDomains"
              - name: X-Content-Type-Options
                value: nosniff
              - name: X-Frame-Options
                value: SAMEORIGIN
              - name: Referrer-Policy
                value: strict-origin-when-cross-origin
              - name: Permissions-Policy
                value: "camera=(), microphone=(), geolocation=(), payment=()"
      backendRefs:
        - name: proxmox
          port: 8006
          kind: Service
          group: ""
          weight: 1