From 1f9340110d465d77784027838a16dbbe7c3c8b65 Mon Sep 17 00:00:00 2001
From: Martyn <m@rtyn.berlin>
Date: Mon, 15 Sep 2025 13:09:50 +0200
Subject: [PATCH] Starting to need an internal-only ingress.

---
 .../app-ingress-nginx-internal.yaml           | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 everything-app/app-ingress-nginx-internal.yaml

diff --git a/everything-app/app-ingress-nginx-internal.yaml b/everything-app/app-ingress-nginx-internal.yaml
new file mode 100644
index 0000000..cb7db40
--- /dev/null
+++ b/everything-app/app-ingress-nginx-internal.yaml
@@ -0,0 +1,54 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ingress-nginx
+  namespace: argocd
+spec:
+  destination:
+    namespace: cluster-ingress
+    server: https://kubernetes.default.svc
+  project: infra
+  source:
+    chart: ingress-nginx
+    repoURL: https://kubernetes.github.io/ingress-nginx
+    targetRevision: 4.12.1
+    helm:
+      parameters:
+        - name: controller.ingressClassResource.default
+          value: 'false'
+        - name: controller.ingressClassResource.name
+          value: 'internal-nginx'
+        - name: controller.config.annotations-risk-level
+          value: Critical
+        - name: controller.service.type
+          value: LoadBalancer
+        - name: controller.allowSnippetAnnotations
+          value: 'true'
+        - name: controller.resources.requests.cpu
+          value: 35m
+        - name: controller.resources.requests.memory
+          value: '351198544'
+        - name: controller.extraArgs.default-ssl-certificate
+          value: cluster-ingress/cluster-ingress-wildcard
+        - name: controller.config.http-snippet
+          value: 'more_set_headers -a "X-Robots-Tag: noai";
+
+            more_set_headers -a "X-Robots-Tag: Google-Extended: none";
+
+            more_set_headers -a "X-Robots-Tag: GPTBot: none";
+
+            more_set_headers -a "X-Robots-Tag: ChatGPT-User: none";
+
+            more_set_headers -a "X-Robots-Tag: anthropic-ai: none";
+
+            more_set_headers -a "X-Robots-Tag: CCBot: none";
+
+            more_set_headers -a "X-Robots-Tag: semrushbot: none";
+
+            more_set_headers -a "X-Robots-Tag: Amazonbot: none";
+
+            more_set_headers -a "X-Robots-Tag: dotbot: none";
+
+            more_set_headers -a "X-Robots-Tag: AhrefsBot: none";'
+        - name: controller.config.block-user-agents
+          value: ~*Amazonbot,~*SemrushBot,~*DotBot,~*Ahrefsbot,~*GPT