cluster

commit 3e392abf95390dd26acf1a9b2791fdff4c36ef20
parent 5eecc14c94e930eba70c9221964c6d09b137e7bf
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sat, 11 Apr 2026 20:21:57 +0200

move api to subdomain

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/envoy-gateway/gateway_settings.yaml
 | 
12
++++++++++++
M
apps/talos_cluster/wanderer/pocketbase.yaml
 | 
2
+-
M
apps/talos_cluster/wanderer/route.yaml
 | 
30
++++++++++++++++++++----------
M
apps/talos_cluster/wanderer/web.yaml
 | 
2
+-

4 files changed, 34 insertions(+), 12 deletions(-)
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -857,6 +857,18 @@ spec:
         certificateRefs:
           - kind: Secret
             name: wanderer.mtrnord.blog-tls
+    - name: https-mtrnord-blog-wanderer-api
+      protocol: HTTPS
+      hostname: "api.wanderer.mtrnord.blog"
+      port: 443
+      allowedRoutes:
+        namespaces:
+          from: "All"
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - kind: Secret
+            name: api.wanderer.mtrnord.blog-tls
     - name: http
       protocol: HTTP
       port: 80
diff --git a/apps/talos_cluster/wanderer/pocketbase.yaml b/apps/talos_cluster/wanderer/pocketbase.yaml
@@ -34,7 +34,7 @@ spec:
                   name: wanderer-secrets
                   key: POCKETBASE_ENCRYPTION_KEY
             - name: ORIGIN
-              value: "https://wanderer.mtrnord.blog"
+              value: "https://api.wanderer.mtrnord.blog"
             - name: POCKETBASE_SMTP_ENABLED
               value: "true"
             - name: POCKETBASE_SMTP_HOST
diff --git a/apps/talos_cluster/wanderer/route.yaml b/apps/talos_cluster/wanderer/route.yaml
@@ -13,25 +13,35 @@ spec:
     - matches:
         - path:
             type: PathPrefix
-            value: /api
-        - path:
-            type: PathPrefix
-            value: /_
+            value: /
       backendRefs:
-        - name: wanderer-db
-          port: 8090
+        - name: wanderer-web
+          port: 3000
       timeouts:
-        request: 120s
+        request: 240s
         backendRequest: 0s
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: wanderer-db
+  namespace: wanderer
+spec:
+  parentRefs:
+    - name: envoy-gateway
+      namespace: envoy-gateway
+  hostnames:
+    - api.wanderer.mtrnord.blog
+  rules:
     - matches:
         - path:
             type: PathPrefix
             value: /
       backendRefs:
-        - name: wanderer-web
-          port: 3000
+        - name: wanderer-db
+          port: 8090
       timeouts:
-        request: 240s
+        request: 120s
         backendRequest: 0s
 ---
 apiVersion: gateway.envoyproxy.io/v1alpha1
diff --git a/apps/talos_cluster/wanderer/web.yaml b/apps/talos_cluster/wanderer/web.yaml
@@ -24,7 +24,7 @@ spec:
             - name: ORIGIN
               value: "https://wanderer.mtrnord.blog"
             - name: PUBLIC_POCKETBASE_URL
-              value: "https://wanderer.mtrnord.blog"
+              value: "https://api.wanderer.mtrnord.blog"
             - name: MEILI_URL
               value: "http://wanderer-search:7700"
             - name: MEILI_MASTER_KEY