🚧 cilium ingress

kubernetes/apps/default/immich/app/web/helmrelease.yaml

@@ -60,7 +60,7 @@ spec:
           nginx.ingress.kubernetes.io/configuration-snippet: |
             rewrite /api/(.*) /$1 break;
           nignx.ingress.kubernetes.io/force-ssl-redirect: "true"
-          # nginx.ingress.kubernetes.io/proxy-body-size: "0"
+          nginx.ingress.kubernetes.io/proxy-body-size: "0"
         hosts:
           - host: &host photos.${SECRET_CLUSTER_DOMAIN}
             paths:

kubernetes/apps/kube-system/cilium/app/helmrelease.yaml

@@ -85,7 +85,8 @@ spec:
     l7proxy: true
     ingressController:
       enabled: true
-      defaultSecretNamespace: ${SECRET_CLUSTER_DOMAIN//./-}-tls
+      defaultSecretNamespace: networking
+      defaultSecretName: ${SECRET_CLUSTER_DOMAIN//./-}-tls
       loadbalancerMode: shared
       service:
         loadBalancerIP: "${CLUSTER_LB_CILIUM}"