From 5f83143d912499d75909be563ac655dcaa2856a2 Mon Sep 17 00:00:00 2001
From: Shahab Dogar <shahab@dogar.dev>
Date: Wed, 19 Nov 2025 20:44:28 +0500
Subject: [PATCH] feat: NpmCache | swap ingress to traefik

---
 npmcache/manifest.yaml | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/npmcache/manifest.yaml b/npmcache/manifest.yaml
index 1cef53e..786eb5d 100644
--- a/npmcache/manifest.yaml
+++ b/npmcache/manifest.yaml
@@ -114,6 +114,20 @@ spec:
       targetPort: 4873
   type: ClusterIP
 ---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: verdaccio
+  namespace: homelab
+spec:
+  ipAllowList:
+    sourceRange:
+      - "127.0.0.1/32"
+      - "10.43.0.0/16"
+  rateLimit:
+    average: 10
+    burst: 50
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -124,12 +138,10 @@ metadata:
     cert-manager.io/acme-challenge-type: "dns01"
     cert-manager.io/private-key-size: "4096"
 
-    # NGINX IP-based rate limiting
-    nginx.ingress.kubernetes.io/limit-rps: "10"
-    nginx.ingress.kubernetes.io/limit-burst-multiplier: "5"
-    nginx.ingress.kubernetes.io/limit-whitelist: "127.0.0.1"
+    # Traefik Middleware
+    traefik.io/router.middlewares: "verdaccio@kubernetescrd"
 spec:
-  ingressClassName: nginx-internal
+  ingressClassName: traefik
   tls:
     - hosts:
         - npm.dogar.dev