chemavxandClaude Opus 4.8 48ed88cc8d zona-exclusion: serve www + 301 redirect to apex, add www to TLS SAN ...

Adds www.zonadeexclusion.com to the Ingress (rules + tls hosts) so cert-manager
re-issues zona-exclusion-tls covering apex + www via HTTP-01, and a Traefik
redirectRegex Middleware that 301s www -> apex (ES canonical = apex). Mirrors the
EN redirect-to-www-https middleware, inverted. DNS for www was fixed in Phase 1
(stale explicit A removed; now resolves via the favonia wildcard).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 06:55:56 +00:00

..

argocd-app.yaml

zona-exclusion: drop dead zona-exclusion-secrets ignoreDifferences (3c)

2026-06-21 20:12:57 +00:00

deployment.yaml

zona-exclusion: serve www + 301 redirect to apex, add www to TLS SAN

2026-06-23 06:55:56 +00:00

infisical-zona-exclusion-secrets.yaml

zona-exclusion: stage Infisical-backed SMTP secret with key remap (3a)

2026-06-21 20:10:48 +00:00