Revert CORS, HTTPS headers, and well-known changes

Reverts the following commits:
- 88e29c0 Add a .well-known to the base domain.
- 01abc2c No auto https for mail
- b7d6265 Add forwarde https headers
- aa5a806 Add https forward headers
- d32af60 Add cors to stalwart

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

stalwart/templates/ingress.yaml

@@ -8,17 +8,6 @@ metadata:
     cert-manager.io/cluster-issuer: prod-cluster-issuer
     nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
     nginx.ingress.kubernetes.io/ssl-passthrough: "false"
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
-    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS"
-    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization"
-    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
-    nginx.ingress.kubernetes.io/configuration-snippet: |
-      proxy_set_header X-Forwarded-Proto $scheme;
-      proxy_set_header X-Forwarded-Ssl on;
-      proxy_set_header X-Real-IP $remote_addr;
-      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 spec:
   ingressClassName: nginx
   rules:
@@ -58,41 +47,3 @@ spec:
         - mail.hensen.io
         - autoconfig.hensen.io
         - autodiscover.hensen.io
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {{ include "stalwart.fullname" . }}-wellknown
-  labels:
-    {{- include "stalwart.labels" . | nindent 4 }}
-  annotations:
-    cert-manager.io/cluster-issuer: prod-cluster-issuer
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
-    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS"
-    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization"
-    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
-    nginx.ingress.kubernetes.io/configuration-snippet: |
-      proxy_set_header X-Forwarded-Proto $scheme;
-      proxy_set_header X-Forwarded-Ssl on;
-      proxy_set_header X-Real-IP $remote_addr;
-      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: hensen.io
-    http:
-      paths:
-      - path: /.well-known
-        pathType: Prefix
-        backend:
-          service:
-            name: {{ include "stalwart.fullname" . }}
-            port:
-              number: 8080
-  tls:
-    - secretName: letsencrypt-prod-wellknown
-      hosts:
-        - hensen.io