From 2df6ebf305a3ce3601054e734725ae2e8fb40ee1 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sun, 14 Jun 2026 17:43:08 +0000 Subject: [PATCH] health: fix middleware ref namespace prefix (restore site from 404) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit My previous commit referenced the new limiter as `health-rate-limit@kubernetescrd`, omitting the namespace prefix. Traefik CRD middleware refs are `-@kubernetescrd`, and the Middleware lives in the `traefik` ns, so the router couldn't resolve it — Traefik failed the whole health.viktorbarzin.me router and returned 404 on every path (the app + pod were healthy throughout; verified via port-forward). Correct it to `traefik-health-rate-limit@kubernetescrd`, matching the working traefik-tripit-rate-limit / traefik-actualbudget-rate-limit references. Co-Authored-By: Claude Opus 4.8 --- stacks/health/main.tf | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/stacks/health/main.tf b/stacks/health/main.tf index df3a68fe..8d21d33b 100644 --- a/stacks/health/main.tf +++ b/stacks/health/main.tf @@ -209,8 +209,12 @@ module "ingress" { # The redesigned SPA bursts well past the default 10/50 limiter on each page # load (shell + fonts + a 5-8 call API burst). Swap the shared limiter for a # health-specific one (100/1000), mirroring tripit/immich/actualbudget. + # The ref MUST carry the middleware's namespace prefix: the CRD lives in the + # `traefik` ns, so it's `traefik-health-rate-limit@kubernetescrd` (same form as + # traefik-tripit-rate-limit). Without the prefix Traefik can't resolve it and + # 404s the whole router. skip_default_rate_limit = true - extra_middlewares = ["health-rate-limit@kubernetescrd"] + extra_middlewares = ["traefik-health-rate-limit@kubernetescrd"] extra_annotations = { "gethomepage.dev/enabled" = "true" "gethomepage.dev/name" = "Health"