made some work on the ingress

core/ingress.tf

@@ -20,6 +20,9 @@ resource "helm_release" "nginx_ingress" {
   version          = "v41.7.1"
   namespace        = "traefik"
   create_namespace = true
+  wait             = false
+
+
   set = [
     {
       name  = "ports.web.nodePort"

core/module.tf

@@ -56,6 +56,7 @@ variable "kubernetes" {
     service_type           = optional(string, "ClusterIP")
     service_name           = optional(string)
     domain_name            = optional(string)
+    exposed                = optional(bool, true)
     liveness_tcp_socket    = optional(number)
     liveness_http_get      = optional(string)
     liveness_http_get_path = optional(string)

core/services.tf

@@ -1,3 +1,31 @@
+resource "kubernetes_ingress_v1" "automatic_ingress" {
+  for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true && value.exposed == true }
+  metadata {
+    name      = "${each.key}-ingress"
+    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
+  }
+
+  spec {
+    ingress_class_name = "traefik"
+    rule {
+      host = join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"])
+      http {
+        path {
+          path = "/"
+          backend {
+            service {
+              name = "${each.key}-svc"
+              port {
+                number = each.value.service_port[0] #selecting the first of the list
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}
+
 resource "kubernetes_service_v1" "automatic_service" {
   for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true }
   metadata {

core/variables.auto.tfvars

@@ -1,6 +1,6 @@
 kubernetes = {
   reverse-proxy = {
-    #enabled = false
+    enabled = false
     #docker        = true
     image         = "nginx:latest"
     service_port  = [80, 443]
@@ -79,6 +79,7 @@ kubernetes = {
     #enabled = false
     #docker = true
     image               = "gitea/act_runner:latest"
+    exposed             = false
     connected_namespace = "gitea"
     environment = {
       GITEA_INSTANCE_URL              = { value = "https://gitea.geeraert.eu/" }
@@ -140,6 +141,7 @@ kubernetes = {
     image          = "ghcr.io/bitwarden/admin:2026.1.0"
     extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/config.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/uid.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml"]
     service_port   = [5000]
+    exposed        = false
     config_map_ref = ["global.env", "uid.env", "global.override.env"]
     environment    = {}
 
@@ -168,6 +170,7 @@ kubernetes = {
     name                = "bitwarden-api"
     image               = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_api:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env", "global.override.env"]
     environment         = {}
 
@@ -195,6 +198,7 @@ kubernetes = {
     name                = "bitwarden-attachments"
     image               = "ghcr.io/bitwarden/attachments:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env"]
     environment         = {}
 
@@ -213,6 +217,7 @@ kubernetes = {
     name                = "bitwarden-events"
     image               = "ghcr.io/bitwarden/events:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env", "global.override.env"]
     environment         = {}
 
@@ -235,6 +240,7 @@ kubernetes = {
     name                = "bitwarden-icons"
     image               = "ghcr.io/bitwarden/icons:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env"]
     environment         = {}
 
@@ -256,6 +262,7 @@ kubernetes = {
     name                = "bitwarden-identity"
     image               = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_identity:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env", "global.override.env"]
     environment         = {}
 
@@ -283,6 +290,7 @@ kubernetes = {
     name                = "bitwarden-mssql"
     image               = "ghcr.io/bitwarden/mssql:2026.1.0"
     service_port        = [1433, 5000]
+    exposed             = false
     config_map_ref      = ["mssql.env", "uid.env", "mssql.override.env"]
     environment         = {}
     database = {
@@ -311,6 +319,8 @@ kubernetes = {
     name                = "bitwarden-nginx"
     image               = "ghcr.io/bitwarden/nginx:2026.1.0"
     service_port        = [5000, 8080, 8443]
+    exposed             = true #no need to set as true but I did it for easy access
+    domain_name         = "bitwarden"
     config_map_ref      = ["uid.env"]
     environment         = {}
 
@@ -338,6 +348,7 @@ kubernetes = {
     name                = "bitwarden-notifications"
     image               = "ghcr.io/bitwarden/notifications:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env", "global.override.env"]
     environment         = {}
 
@@ -359,6 +370,7 @@ kubernetes = {
     name                = "bitwarden-sso"
     image               = "ghcr.io/bitwarden/sso:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env", "global.override.env"]
     environment         = {}
 
@@ -385,6 +397,7 @@ kubernetes = {
     name                = "bitwarden-web"
     image               = "ghcr.io/bitwarden/web:2026.1.0"
     service_port        = [5000]
+    exposed             = false
     config_map_ref      = ["global.env", "uid.env"]
     environment         = {}