apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: xandikos
  annotations:
    nginx.ingress.kubernetes.io/auth-type: basic
    nginx.ingress.kubernetes.io/auth-secret: my-htpasswd
    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - mysite'
spec:
  ingressClassName: nginx
  rules:
  - host: example.com
    http:
      paths:
      - backend:
          service:
            name: xandikos
            port:
              name: web
        path: /dav(/|$)(.*)
        pathType: Prefix
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: xandikos-wellknown
spec:
  ingressClassName: nginx
  rules:
  - host: example.com
    http:
      paths:
      - backend:
          service:
            name: xandikos
            port:
              name: web
        path: /.well-known/carddav
        pathType: Exact
      - backend:
          service:
            name: xandikos
            port:
              name: web
        path: /.well-known/caldav
        pathType: Exact