From 116f949f86b33e1b90461f123384518bb2dd3fd2 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Thu, 29 Jan 2026 15:46:19 -0800
Subject: [PATCH] Enable Tailscale ingress via Helm values

Move ingress config from separate file into Helm values.yaml.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 .../manifests/hajimari/ingress-tailscale.yaml | 22 -------------------
 argocd/manifests/hajimari/values.yaml         | 16 ++++++++++++--
 2 files changed, 14 insertions(+), 24 deletions(-)
 delete mode 100644 argocd/manifests/hajimari/ingress-tailscale.yaml

diff --git a/argocd/manifests/hajimari/ingress-tailscale.yaml b/argocd/manifests/hajimari/ingress-tailscale.yaml
deleted file mode 100644
index 2b33c6b..0000000
--- a/argocd/manifests/hajimari/ingress-tailscale.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-# Tailscale Ingress for Hajimari
-# Exposes Hajimari at https://go.tail8d86e.ts.net with Let's Encrypt TLS
-# Caddy proxies go.ops.eblu.me -> this endpoint
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: hajimari-tailscale
-  namespace: hajimari
-  annotations:
-    tailscale.com/proxy-class: "default"
-    # Don't show Hajimari in its own dashboard
-    hajimari.io/enable: "false"
-spec:
-  ingressClassName: tailscale
-  defaultBackend:
-    service:
-      name: hajimari
-      port:
-        number: 3000
-  tls:
-    - hosts:
-        - go
diff --git a/argocd/manifests/hajimari/values.yaml b/argocd/manifests/hajimari/values.yaml
index 94140ec..9457794 100644
--- a/argocd/manifests/hajimari/values.yaml
+++ b/argocd/manifests/hajimari/values.yaml
@@ -43,10 +43,22 @@ hajimari:
 serviceAccount:
   create: true
 
-# Ingress is handled separately via ingress-tailscale.yaml
+# Tailscale Ingress - exposes at go.tail8d86e.ts.net
+# Caddy will proxy go.ops.eblu.me to this
 ingress:
   main:
-    enabled: false
+    enabled: true
+    className: tailscale
+    annotations:
+      hajimari.io/enable: "false"
+    hosts:
+      - host: go
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+      - hosts:
+          - go
 
 # No persistence needed - config is in values.yaml
 persistence: