moved radicale to c.aggtaa.com/server2 and davical to c.aggtaa.com/server

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -34,7 +34,7 @@ spec:
               tag: "82-1.1.12"
             env:
               TZ: Europe/Moscow
-              HOST_NAME: c2.aggtaa.com
+              HOST_NAME: c.aggtaa.com
               DBHOST: davical-postgres
               UPDATE_FROM_OLD: "false"
               PGSQL_ROOT_PASS:
@@ -74,20 +74,24 @@ spec:
     ingress:
       app:
         className: traefik
+        # no cert-manager annotation here: radicale's own Ingress already
+        # requests/owns the Certificate for c.aggtaa.com -> radicale-tls.
+        # A second Ingress with the annotation would create a competing
+        # Certificate for the same host/secret.
         annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-prod
+          traefik.ingress.kubernetes.io/router.middlewares: pim-davical-stripprefix@kubernetescrd
         hosts:
-          - host: c2.aggtaa.com
+          - host: c.aggtaa.com
             paths:
-              - path: /
+              - path: /server
                 pathType: Prefix
                 service:
                   identifier: app
                   port: http
         tls:
-          - secretName: davical-tls
+          - secretName: radicale-tls
             hosts:
-              - c2.aggtaa.com
+              - c.aggtaa.com
 
     persistence:
       config: