infcloud added. davical additional ingress at c2.aggtaa.com

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -90,6 +90,11 @@ spec:
         # No stripPrefix middleware either: Apache needs to see the /server
         # prefix itself (via the Alias added in the seed-config initContainer)
         # so that DAViCal's self-referential links come out correct.
+        #
+        # c2.aggtaa.com/server is the same backend, reachable same-origin
+        # from InfCloud (also on c2.aggtaa.com) so its browser-side CalDAV
+        # requests don't need CORS. That ingress owns the cert-manager
+        # annotation for c2.aggtaa.com; this one just reuses its secret.
         hosts:
           - host: c.aggtaa.com
             paths:
@@ -98,10 +103,20 @@ spec:
                 service:
                   identifier: app
                   port: http
+          - host: c2.aggtaa.com
+            paths:
+              - path: /server
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
         tls:
           - secretName: radicale-tls
             hosts:
               - c.aggtaa.com
+          - secretName: infcloud-tls
+            hosts:
+              - c2.aggtaa.com
 
     persistence:
       config: