# Traefik TCP SSH + TrinityIngress HTTP health.

---
# Traefik TCP :2222 → OpenSSH in the pod (plain SSH; HostSNI catch-all).
apiVersion: traefik.io/v1alpha1
kind: IngressRouteTCP
metadata:
  name: cursor-devbox-ssh
  namespace: cursor-devbox
spec:
  entryPoints:
    - ssh
  routes:
    - match: HostSNI(`*`)
      services:
        - name: cursor-devbox
          port: 22

---
# DNS A record + HTTPS front for the tiny HTTP health page; SSH uses Traefik TCP :2222.
apiVersion: ingress.trinitysan.by/v1
kind: TrinityIngress
metadata:
  name: cursor-devbox
  namespace: cursor-devbox
spec:
  hostname: devbox.trinitysan.by
  targetTraefikIP: "91.210.106.53"
  serviceRef:
    namespace: cursor-devbox
    name: cursor-devbox
    port: 8080
  certificateReclaimPolicy: Retain