Fix Tailscale Ingress format for torrent and kiwix

Use defaultBackend + tls.hosts instead of rules, matching other working
ingresses in the cluster.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

argocd/manifests/kiwix/ingress-tailscale.yaml

@@ -2,18 +2,17 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: kiwix
+  name: kiwix-tailscale
   namespace: kiwix
+  annotations:
+    tailscale.com/proxy-class: "default"
 spec:
   ingressClassName: tailscale
-  rules:
-    - host: kiwix
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: kiwix
-                port:
-                  number: 80
+  defaultBackend:
+    service:
+      name: kiwix
+      port:
+        number: 80
+  tls:
+    - hosts:
+        - kiwix

argocd/manifests/torrent/ingress-tailscale.yaml

@@ -2,18 +2,17 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: transmission
+  name: transmission-tailscale
   namespace: torrent
+  annotations:
+    tailscale.com/proxy-class: "default"
 spec:
   ingressClassName: tailscale
-  rules:
-    - host: torrent
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: transmission
-                port:
-                  number: 9091
+  defaultBackend:
+    service:
+      name: transmission
+      port:
+        number: 9091
+  tls:
+    - hosts:
+        - torrent