M apps/site/site.yaml → apps/site/site.yaml

@@ -5,11 +5,11 @@ name: icyphox.sh
   namespace: default
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/server-snippet: |
-      location = /.well-known/webfinger {
-        return 301 https://h.icyphox.sh$request_uri;
-      }
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      if ($request_uri !~ "^/.well-known/webfinger") {
+        return 301 https://anirudh.fi$request_uri;
+      }
 spec:
   ingressClassName: nginx
   tls:
@@ -20,6 +20,16 @@ rules:
   - host: icyphox.sh
     http:
       paths:
+      - path: /.well-known/webfinger
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: honk
+            port:
+              number: 8080
+  - host: icyphox.sh
+    http:
+      paths:
       - path: /
         pathType: Prefix
         backend:
@@ -33,6 +43,9 @@ kind: Ingress
 metadata:
   name: anirudh.fi
   namespace: default
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
 spec:
   ingressClassName: nginx
   tls: