c311a6a3c9
All checks were successful
ci/woodpecker/push/default Pipeline was successful
macOS Safari's Add to Dock (and iOS/Android home-screen installs) fetch the app icon and web manifest without any session cookies, so the Authentik forward-auth 302 on tasks.viktorbarzin.me made Safari fall back to a letter monogram instead of the real icon. Viktor asked for an ingress carve-out so exactly these five static PWA assets are publicly fetchable: /apple-touch-icon.png, /favicon.png, /pwa-192x192.png, /pwa-512x512.png, /manifest.webmanifest. A second ingress_factory instance (auth=none, dns_type=none, same host) routes only those paths straight to the tasks service; the SPA shell and /api stay behind Authentik exactly as before. The new carve-out is also registered in the Authentik walling-off probe so a future regression (anything 302-ing these paths to Authentik again) alarms, and the service catalog entry records the exception. stacks/tasks/imports.tf adopts the live tasks resources into Terraform state first: the stack's first-ever apply (pipeline 477, 2026-07-03) died mid-apply after creating the resources but before the pg state write, leaving tasks.states empty — without the import blocks this (and every future) tasks apply would create-fail with 'already exists'. Same pattern as the monitoring alert-digest adoption. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| modules/monitoring | ||
| imports.tf | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||