radicale and agendav removed. infcloud at c.aggtaa.com

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -82,7 +82,7 @@ spec:
     ingress:
       app:
         className: traefik
-        # no cert-manager annotation here: radicale's own Ingress already
+        # no cert-manager annotation here: infcloud's own Ingress already
         # requests/owns the Certificate for c.aggtaa.com -> radicale-tls.
         # A second Ingress with the annotation would create a competing
         # Certificate for the same host/secret.
@@ -90,11 +90,6 @@ spec:
         # No stripPrefix middleware either: Apache needs to see the /server
         # prefix itself (via the Alias added in the seed-config initContainer)
         # so that DAViCal's self-referential links come out correct.
-        #
-        # c2.aggtaa.com/server is the same backend, reachable same-origin
-        # from InfCloud (also on c2.aggtaa.com) so its browser-side CalDAV
-        # requests don't need CORS. That ingress owns the cert-manager
-        # annotation for c2.aggtaa.com; this one just reuses its secret.
         hosts:
           - host: c.aggtaa.com
             paths:
@@ -103,20 +98,10 @@ spec:
                 service:
                   identifier: app
                   port: http
-          - host: c2.aggtaa.com
-            paths:
-              - path: /server
-                pathType: Prefix
-                service:
-                  identifier: app
-                  port: http
         tls:
           - secretName: radicale-tls
             hosts:
               - c.aggtaa.com
-          - secretName: infcloud-tls
-            hosts:
-              - c2.aggtaa.com
 
     persistence:
       config:

clusters/base/apps/davical/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:QGqssqH3ma/i6jKX46QrWT/ibuqxfTBjH8GRZP+EFZ19KgmW2MeUqPHp2b0KcPT9,iv:iwby/dEzV0X2Ca7diTLzUT5V+e3G2z4bxJSDyiblI8U=,tag:67s/Lo4CjjsDEkITKFnq5g==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:UiW+Tf5LAQ24mthrB5pYqMt7V3G1oOC8eFnSZkVKHA2JIMEl3ptsO+tesl8Ada1y,iv:NDVa9RXC+uIGwKDUuTa6+nMiH9vpWuEIExzmKQTIS4k=,tag:ZN0aYgvUZX392DWAoV0jyA==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:xnZTsq+ba9oCdtYnxuZbnlB4lcniOGpnKZSqqyCcG8w=,iv:vVaO2gg0o3LI6ZtNDPdjjnlm6dyYmeUT1jQRgyJ8Cqw=,tag:ILhGxMaB+Mmv2vyKbPyYaQ==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:ZW2qTLmKG74lg4rMsTUiJXpDd5tQPRcrKGagvij9cbkjdxmzwDdsFxRAZM/0OO+r,iv:LhtEHlpKf2KOSr/mTsHHsa8MPM++qz0+nZQX9RK7ZpQ=,tag:wpdTt04Rr7Ma/1m227SjZw==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:Q77nDY3pBE8bjoKHch/bHQSDVaZM5hKEZ9DnnrMmqsF0QXYV6FO8mQVNohbwRZ0k,iv:d6yzl8RuPqqob02WsvDHeeeR8c9XYXm3TgTrQabipCg=,tag:cVohM9yJ4CYJMAuakRFLbw==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:s0Q7mKqCbe4WkJpmR0/rN8uKaUEjvJq3zVMvyqoEEWU=,iv:xFYCjvyYk0Bb/6Uf7pjtI1moX8X73PvKSAzD/d6+EAA=,tag:W6SGO/k7kaJs8ScVvSZqew==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOcFhiVUNkZVRZU2hHUXhI
-            RlNzYXdIdElMbSttYVFibUM2NHVObWV4T1ZrCkp3ek9ZdEE0VTdMaWlRdHk3amsx
-            dmUvblo4ZVM4OEdnOXhkYmV2a2R4dkkKLS0tIHhoVUd4QThTZXVsNDMwVXY1bk4v
-            U0hLMkd1bllzaUxSVTRVUEk5WDgvZjAKIHfqnZMlM8IA83jIu6Isd+XObtATeUkp
-            vFRK/oxl3bV8OgyTFtTDotb16CvhN6IBjKqfC+7CIsrOh9fBwxwuQw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMdEtBUFZtNVhTTFRwY1Ir
+            L2tMblVhRzREcmRwWnpFVWNnNmZ1NXRWS1YwCjA5WjlJK2ZIWmtoS3p0NHhmckhu
+            ODMwWXhSN0RRMnRkVlNTUHB6MXNKc1kKLS0tIHZ5eDltOG9EQVhiWjZlWlV0SEJ6
+            eldqTkxXYlhXaDkvNy8vQXVKYWNBTEEKYLqYfDKEk+uwP2wC6dIdZq0LY7Ex2otO
+            mGMuntyPw6711z17Cat5ssTSQqw0iVO16e2s0tjI1MXctrF6qRDQcw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:24:17Z"
-    mac: ENC[AES256_GCM,data:gvbGpqeSUj6qHNcDX+FBxJJWGglNQwR61yWUo5wBrVaagxaO342pq/sDF7oDBG8AzIfSNk5kXuWzkWe8KJLFnCxzw4XxoFqBDp2Mlkr1iQfKVptj+Urv2Vrsgd9CN5ctUuDoas8U+oQhu5G4pni/KRLXBUwdO0Z0ZyzzdDaDGSU=,iv:Dc/o2x4dfT4Sx+5nqTIPx7wh5u0/ThO1uduLcGX8byk=,tag:AR716bU6P84AyyOVT8NwzA==,type:str]
+    lastmodified: "2026-08-26T10:24:24Z"
+    mac: ENC[AES256_GCM,data:m8KPG8DZgO+p7PSirimtbYDpXtnqJ57l4N0x4Cah6OVpVD+yjSYV1nxNtHjp+djy5Vl23iKc75y0AmaA7x8LYaWzA2nBe43hiG9Fft6YM6P7q6Ms1jXjG2ARv0e3fZmHFRkYZ8eWkscxc1BmzhN05kyKQR6/yifP/W5CJgsc24g=,iv:tz31W18+cD5nESjpHh88WFXRC5WEn/8TYASMSd9c+bs=,tag:s0kkp/h2r87cEAngp5Sr+w==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0