apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: sabnzbd-apikey namespace: sabnzbd spec: entryPoints: - websecure routes: - match: Host(`download.pvr.spamasaurus.com`) && (Header(`X-Api-Key`, `5bebd6163f521cd7f4aa2e6c1cc8f9f2`) || Query(`apikey`, `5bebd6163f521cd7f4aa2e6c1cc8f9f2`)) kind: Rule services: - name: sabnzbd port: 8080 middlewares: - name: security-headers@file