radicale and agendav removed. infcloud at c.aggtaa.com

clusters/base/apps/infcloud/helmrelease-infcloud.yaml

@@ -34,13 +34,16 @@ spec:
     ingress:
       app:
         className: traefik
-        # this ingress owns the cert-manager request for c2.aggtaa.com;
-        # davical's ingress adds a second host on the same domain (for the
-        # /server CalDAV path) and just references the secret below.
+        # this ingress owns the cert-manager request for c.aggtaa.com
+        # (secret kept as "radicale-tls" post-migration so the existing,
+        # already-valid cert is reused instead of re-issued). davical's
+        # ingress just references the same secret without its own
+        # annotation - a second annotated Ingress would create a
+        # competing Certificate for the same host/secret.
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-prod
         hosts:
-          - host: c2.aggtaa.com
+          - host: c.aggtaa.com
             paths:
               - path: /
                 pathType: Prefix
@@ -48,9 +51,9 @@ spec:
                   identifier: app
                   port: http
         tls:
-          - secretName: infcloud-tls
+          - secretName: radicale-tls
             hosts:
-              - c2.aggtaa.com
+              - c.aggtaa.com
 
     persistence:
       config: