fix ingress

apps/production/apex-ingress.yaml

@@ -0,0 +1,37 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: axion-apex-tls
+  namespace: matrix
+spec:
+  secretName: axion-apex-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
+    - axion1337.chat
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: axion-apex
+  namespace: matrix
+spec:
+  entryPoints: [websecure]
+  tls:
+    secretName: axion-apex-tls
+  routes:
+    # Höchste Priorität: /.well-known/matrix/* -> wellKnownDelegation-Service
+    - match: Host(`axion1337.chat`) && PathPrefix(`/.well-known/matrix`)
+      kind: Rule
+      priority: 100
+      services:
+        - name: matrix-stack-well-known-delegation
+          port: 8080
+    # Niedrigere Priorität: alles andere -> Element Web
+    - match: Host(`axion1337.chat`)
+      kind: Rule
+      priority: 10
+      services:
+        - name: matrix-stack-element-web
+          port: 8080

apps/production/custom-configs/mas-secret.yaml

@@ -10,6 +10,7 @@ stringData:
         smtp-config:
           config: |
             email:
+              mode: enabled
               from: gamemaster@axion1337.chat
               transport: smtp
               smtp:

apps/production/element-server-suite.yaml

@@ -60,7 +60,7 @@ spec:
     elementWeb:
       enabled: true
       ingress:
-        host: chat.axion1337.chat
+        host: axion1337.chat
 
     # Element Admin
     elementAdmin:
@@ -72,5 +72,5 @@ spec:
     # Aktiviert – notwendig für MatrixRTC-Discovery
     wellKnownDelegation:
       enabled: true
-      baseDomainRedirect:
+      ingress:
-        url: https://chat.axion1337.chat
+        className: "none"  # Deaktiviert den Chart-Ingress, wir erstellen einen eigenen