blumeops/argocd/manifests/tailscale-operator/svc-forge-external.yaml

---
# Headless service + manual Endpoints to route to Forgejo on indri.
# ExternalName services don't have a ClusterIP, which the Tailscale
# ingress operator requires. This pattern creates a real ClusterIP
# that forwards to indri's Tailscale IP.
apiVersion: v1
kind: Service
metadata:
  name: forge-external
  namespace: tailscale
spec:
  ports:
    - name: http
      port: 3001
      protocol: TCP
---
apiVersion: v1
kind: Endpoints
metadata:
  name: forge-external
  namespace: tailscale
subsets:
  - addresses:
      - ip: 100.98.163.89
    ports:
      - name: http
        port: 3001
        protocol: TCP