fix ingress

deploy/appflowy/gotrue-ingress.yaml

@@ -0,0 +1,31 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: appflowy-gotrue-ingress
+  namespace: appflowy
+  annotations:
+    nginx.ingress.kubernetes.io/use-regex:   "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: nginx
+
+  tls:
+    - hosts:
+        - appflowy.prod.panic.haus
+      secretName: appflowy-tls
+
+  rules:
+    - host: appflowy.prod.panic.haus
+      http:
+        paths:
+          # GoTrue: rewrite /gotrue(/|$)(.*) → /$2
+          - path: /gotrue(/|$)(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: gotrue
+                port:
+                  number: 9999

deploy/appflowy/ingress.yaml

@@ -30,17 +30,6 @@ spec:
                 port:
                   number: 80
 
-          # ┌──────────────────────────────────────────────────────────────────────────────┐
-          # │ 2) GoTrue (auth) – exposed under /gotrue                                     │
-          # └──────────────────────────────────────────────────────────────────────────────┘
-          - path: /gotrue
-            pathType: Prefix
-            backend:
-              service:
-                name: gotrue
-                port:
-                  number: 9999
-
           # ┌──────────────────────────────────────────────────────────────────────────────┐
           # │ 3) AppFlowy-Cloud API & Web                                                  │
           #    • If you want API served on /api, and the static Web on /                   │

deploy/appflowy/kustomization.yaml

@@ -8,3 +8,4 @@ resources:
   - deployment.yaml
   - service.yaml
   - ingress.yaml
+  - gotrue-ingress.yaml