Fix Immich/Homepage Ingress host matching, add missing service checks #127

Merged

eblume merged 2 commits from fix/immich-ingress-host into main

2026-02-08 22:12:50 -08:00

eblume commented

2026-02-08 22:11:23 -08:00

Owner

Summary

Fix Immich Ingress host: photos causing 404 with ProxyGroup (same FQDN mismatch as Prometheus/Loki)
Migrate Homepage from old per-service Tailscale proxy to shared ProxyGroup (was the last holdout)
Add Immich and Navidrome to services-check HTTP endpoints

Deployment Notes

Already tested on branch: Immich and Homepage both return 200 via Caddy
Homepage's old Helm-managed Ingress was deleted manually; ArgoCD may recreate it on sync — prune with argocd app sync homepage --prune after merge
Old per-service ts-homepage-* pod in tailscale namespace can be cleaned up after confirming ProxyGroup works

Test Plan

curl https://photos.ops.eblu.me/ returns 200
curl https://go.ops.eblu.me/ returns 200
mise run services-check fully passes after merge

## Summary - Fix Immich Ingress `host: photos` causing 404 with ProxyGroup (same FQDN mismatch as Prometheus/Loki) - Migrate Homepage from old per-service Tailscale proxy to shared ProxyGroup (was the last holdout) - Add Immich and Navidrome to `services-check` HTTP endpoints ## Deployment Notes - Already tested on branch: Immich and Homepage both return 200 via Caddy - Homepage's old Helm-managed Ingress was deleted manually; ArgoCD may recreate it on sync — prune with `argocd app sync homepage --prune` after merge - Old per-service `ts-homepage-*` pod in tailscale namespace can be cleaned up after confirming ProxyGroup works ## Test Plan - [x] `curl https://photos.ops.eblu.me/` returns 200 - [x] `curl https://go.ops.eblu.me/` returns 200 - [ ] `mise run services-check` fully passes after merge

eblume added 2 commits

2026-02-08 22:11:23 -08:00

Fix Immich Ingress host matching, add missing service checks 0da6a0833b

Remove explicit host: field from Immich Ingress — same ProxyGroup FQDN
mismatch as Prometheus and Loki. Add Immich and Navidrome to
services-check HTTP endpoints.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Migrate Homepage Ingress to shared ProxyGroup eb3957fed6

Disable Helm-managed Ingress (chart doesn't support tailscale.com/*
annotations) and create a separate ingress-tailscale.yaml with
proxy-group annotation, matching the pattern used by all other services.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>