ingress route seperations and authentik preperation

apps/paperless/base/webserver-ingress.yaml

@@ -4,7 +4,7 @@ metadata:
   name: paperless-ingress
   namespace: paperless
   labels:
-    expose: "true"
+    local: "true"
 spec:
   entryPoints:
     - web
@@ -15,3 +15,24 @@ spec:
     services:
     - name: paperless-service
       port: 8000
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: paperless-ingress-front
+  namespace: paperless
+  labels:
+    expose: "true"
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+  - match: Host(`documents.steffenillium.de`)
+    kind: Rule
+    middlewares:
+      - name: authentik-middleware
+        namespace: authentik
+    services:
+    - name: paperless-service
+      port: 8000