From 8a66913a5473aa10c87ec169971ac2a70588b1f3 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Thu, 22 Oct 2026 09:36:26 +0200
Subject: [PATCH] Drop the nas.rubenhensen.nl and alv.rubenhensen.nl ingresses

Neither host has a DNS record, so both were unreachable and cert-manager
has been failing to renew their certificates since 6 April. DSM stays
reachable on the LAN at 192.168.1.99. The nas app only held that ingress
and its ExternalName service, so it goes entirely.
---
 apps/templates/nas-folder.yaml | 21 -----------------
 nas/ingress.yaml               | 29 -----------------------
 nas/service.yaml               | 14 -----------
 whishper/whishper-ingress.yaml | 43 ----------------------------------
 4 files changed, 107 deletions(-)
 delete mode 100644 apps/templates/nas-folder.yaml
 delete mode 100644 nas/ingress.yaml
 delete mode 100644 nas/service.yaml
 delete mode 100644 whishper/whishper-ingress.yaml

diff --git a/apps/templates/nas-folder.yaml b/apps/templates/nas-folder.yaml
deleted file mode 100644
index 9c0bd22..0000000
--- a/apps/templates/nas-folder.yaml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: nas
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-  source:
-    repoURL: https://github.com/rubenhensen/k8scd.git
-    targetRevision: HEAD
-    path: nas
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: nas
-  syncPolicy:
-    syncOptions:
-    - CreateNamespace=true
-    automated:
-      selfHeal: true
\ No newline at end of file
diff --git a/nas/ingress.yaml b/nas/ingress.yaml
deleted file mode 100644
index dc4780e..0000000
--- a/nas/ingress.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: nas-ingress
-  annotations:
-    cert-manager.io/cluster-issuer: prod-cluster-issuer
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: nas.rubenhensen.nl
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: nas-external
-            port: 
-              number: 5000
-            
-  # TLS configuration for HTTPS
-  tls:
-    # TLS secretName used on ClusterIssuer
-    - secretName:  letsencrypt-prod
-      hosts:
-        - nas.rubenhensen.nl
-
diff --git a/nas/service.yaml b/nas/service.yaml
deleted file mode 100644
index 16c1343..0000000
--- a/nas/service.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: nas-external
-spec:
-  type: ExternalName
-  externalName: 192.168.1.99
-  ports:
-    - name: nas-5000
-      protocol: TCP 
-      port: 5000
-    - name: nas-5001
-      protocol: TCP
-      port: 5001
\ No newline at end of file
diff --git a/whishper/whishper-ingress.yaml b/whishper/whishper-ingress.yaml
deleted file mode 100644
index 1efb774..0000000
--- a/whishper/whishper-ingress.yaml
+++ /dev/null
@@ -1,43 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: whisper-ingress
-  annotations:
-    # nginx.ingress.kubernetes.io/rewrite-target: /
-    cert-manager.io/cluster-issuer: prod-cluster-issuer
-    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    # type of authentication
-    nginx.ingress.kubernetes.io/auth-type: basic
-    # name of the secret that contains the user/password definitions
-    nginx.ingress.kubernetes.io/auth-secret: whisper-basic-auth
-    # message to display with an appropriate context why the authentication is required
-    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required '
-    nginx.ingress.kubernetes.io/proxy-body-size: "0"
-    # nginx.ingress.kubernetes.io/cors-allow-origin: "http://localhost:3000/"
-    # nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS, DELETE"
-    # If you encounter a redirect loop or are getting a 307 response code
-    # then you need to force the nginx ingress to connect to the backend using HTTPS.
-    #
-    # nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-  # namespace: ente-photos
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: alv.rubenhensen.nl
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: whishper
-            port:
-              number: 8082
-            
-  # TLS configuration for HTTPS
-  tls:
-    # TLS secretName used on ClusterIssuer
-    - secretName:  letsencrypt-prod
-      hosts:
-        - alv.rubenhensen.nl