Prod hardening and K8s drafts: auth fail-close, DB pool, init/schema split, prod init guard

2026-06-27 20:41:41 -05:00
parent 744830c3cd
commit 49bf370d41
9 changed files with 346 additions and 257 deletions
@@ -0,0 +1,43 @@
+{
+  "apiVersion": "networking.k8s.io/v1",
+  "kind": "Ingress",
+  "metadata": {
+    "name": "la-huasca-ts",
+    "namespace": "la-huasca-ts",
+    "annotations": {
+      "traefik.ingress.kubernetes.io/router.entrypoints": "web,websecure"
+    }
+  },
+  "spec": {
+    "ingressClassName": "traefik",
+    "tls": [
+      {
+        "hosts": [
+          "lahuasca.com"
+        ],
+        "secretName": "la-huasca-ts-tls"
+      }
+    ],
+    "rules": [
+      {
+        "host": "lahuasca.com",
+        "http": {
+          "paths": [
+            {
+              "path": "/",
+              "pathType": "Prefix",
+              "backend": {
+                "service": {
+                  "name": "la-huasca-ts",
+                  "port": {
+                    "number": 80
+                  }
+                }
+              }
+            }
+          ]
+        }
+      }
+    ]
+  }
+}