From f761590458e4d07138584ba618e99dbadb874f86 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 21 Jan 2026 16:58:38 -0800
Subject: [PATCH] Fix Tailscale Ingress format for torrent and kiwix

Use defaultBackend + tls.hosts instead of rules, matching other working
ingresses in the cluster.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 argocd/manifests/kiwix/ingress-tailscale.yaml | 23 +++++++++----------
 .../manifests/torrent/ingress-tailscale.yaml  | 23 +++++++++----------
 2 files changed, 22 insertions(+), 24 deletions(-)

diff --git a/argocd/manifests/kiwix/ingress-tailscale.yaml b/argocd/manifests/kiwix/ingress-tailscale.yaml
index 07490bb..67d96be 100644
--- a/argocd/manifests/kiwix/ingress-tailscale.yaml
+++ b/argocd/manifests/kiwix/ingress-tailscale.yaml
@@ -2,18 +2,17 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: kiwix
+  name: kiwix-tailscale
   namespace: kiwix
+  annotations:
+    tailscale.com/proxy-class: "default"
 spec:
   ingressClassName: tailscale
-  rules:
-    - host: kiwix
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: kiwix
-                port:
-                  number: 80
+  defaultBackend:
+    service:
+      name: kiwix
+      port:
+        number: 80
+  tls:
+    - hosts:
+        - kiwix
diff --git a/argocd/manifests/torrent/ingress-tailscale.yaml b/argocd/manifests/torrent/ingress-tailscale.yaml
index 818398b..87e0916 100644
--- a/argocd/manifests/torrent/ingress-tailscale.yaml
+++ b/argocd/manifests/torrent/ingress-tailscale.yaml
@@ -2,18 +2,17 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: transmission
+  name: transmission-tailscale
   namespace: torrent
+  annotations:
+    tailscale.com/proxy-class: "default"
 spec:
   ingressClassName: tailscale
-  rules:
-    - host: torrent
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: transmission
-                port:
-                  number: 9091
+  defaultBackend:
+    service:
+      name: transmission
+      port:
+        number: 9091
+  tls:
+    - hosts:
+        - torrent