Remove endpoint configuration from llamactl-proxy and update service type to ExternalName

apps/base/llamactl-proxy/endpoint.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Endpoints
-metadata:
-  name: llamactl-proxy
-  namespace: llamactl
-subsets:
-- addresses:
-  - ip: ${LLAMACTL_INTERNAL_IP}
-  ports:
-  - port: ${LLAMACTL_INTERNAL_PORT}
-    name: http

apps/base/llamactl-proxy/kustomization.yaml

@@ -5,4 +5,3 @@ namespace: llamactl
 resources:
   - namespace.yaml
   - service.yaml
-  - endpoint.yaml

apps/base/llamactl-proxy/service.yaml

@@ -3,10 +3,8 @@ kind: Service
 metadata:
   name: llamactl-proxy
   namespace: llamactl
+  annotations:
+    tailscale.com/tailnet-fqdn: ${LLAMACTL_TAILNET_FQDN}
 spec:
-  type: ClusterIP
+  type: ExternalName
-  ports:
+  externalName: placeholder
-  - port: 80
-    targetPort: ${LLAMACTL_INTERNAL_PORT}
-    name: http
-  selector: {}

cluster-vars/prod/secret.enc.yaml

@@ -4,32 +4,31 @@ metadata:
     name: cluster-vars-prod
     namespace: flux-system
 stringData:
-    DOMAIN: ENC[AES256_GCM,data:jIu2DVtdBDS6,iv:j3eDAY3LEC+UY5qSM2AbcOp6sLWOpE9ZxiYTM66Fq3Y=,tag:sPZ2Z5sbCQb1rDRJC12LWg==,type:str]
+    DOMAIN: ENC[AES256_GCM,data:d8Am8+O5gWSP,iv:w/NzlvVOZEfaGQo3SaHwUS2pYDQlKXgFgV3bTvxfCvA=,tag:7gch77gphPV+MF4kGPPrpA==,type:str]
-    DOMAIN2: ENC[AES256_GCM,data:xOhhhx9rof7rbQ==,iv:Kz2Yo4fFe0MBVETqsdi9HBv0enLAEHkGnxcq6SvqKb0=,tag:7XHqkfw9MZXtM2O7+rmP3w==,type:str]
+    DOMAIN2: ENC[AES256_GCM,data:W4YQEdUuhRYBtQ==,iv:ixmHLS5rFzrn4dm/XEWVCx6jS4OolHtkR2xrjYGOuBE=,tag:dhcGQe6Psy5kTtXuFUlUPQ==,type:str]
-    GITEA_DOMAIN: ENC[AES256_GCM,data:iZu8VIIsf5id2lI9fA==,iv:EQkbIS/c3M50QaIswSLeYzv3k9oXKUGYp4Rbp1Po0oQ=,tag:obGpMil1JmXDLJoWsl3RYQ==,type:str]
+    GITEA_DOMAIN: ENC[AES256_GCM,data:GpGtFMycF9M+fxnmFA==,iv:r4f8cagOBlJU/btbf4Wl7LKccx/YkntdjXLB9JVQo5I=,tag:WOP2vK5MYWQ9ZDL2Zz5bqA==,type:str]
-    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:efvxiqH4Xgx29b/yrsg=,iv:nMFkh0uiPg5qr0uU/CV3RW2fe2ucRDA+Q/DlbBh7NnA=,tag:Dq/7RbzoTMIRb+SjZqzGyA==,type:str]
+    AUTHELIA_DOMAIN: ENC[AES256_GCM,data:dqSCImDlmlznINpflb4=,iv:GrdISPPtlBA7JTs8diZ+xqdYmbW6U2zR7u/8LUoU3is=,tag:qSpi276PXl2r3jRBYql7JA==,type:str]
-    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:lB/czTCvA8QjCpiXBuiKOxo=,iv:umrYjX0nzutrhigOjdfDXD/hIGCPQiotDmWjpdxrATA=,tag:JRXbieXvXfW0KEbXLRYNpQ==,type:str]
+    TRAEFIK_DOMAIN: ENC[AES256_GCM,data:Bq+pOdIbaKkxU0fUjpHlp1M=,iv:b6HEUwRRBvNiPpiR197727GU6j5tXaFg7ZcEENKtFBc=,tag:oD0e3sThun8sorK1zwuThw==,type:str]
-    LEMMA_DOMAIN: ENC[AES256_GCM,data:PCFMX/szv8zw5uywj9CW,iv:wMNs0UWEhiHKK7C2MnrKCHMZu5xzGRhTCxXhn+CEEuc=,tag:0xNw/3GCjWEHtVczq8Q+IQ==,type:str]
+    LEMMA_DOMAIN: ENC[AES256_GCM,data:9vwSu2s/0YPMdsg9+hTW,iv:GbQNioYCdb6lZSbI/zF7EydQYVsR71wACTZDPRbJg8I=,tag:Nwg/M+X5ETsgRFUgseFI3g==,type:str]
-    GHOST_DOMAIN: ENC[AES256_GCM,data:A4aQ+cA+pwOXs4fDWKfKUw==,iv:fLtDLUpa1g4vhkIpJl7s/1ndoAKfWwEo7EJkzMobl+E=,tag:vFZdWj4JmKjKO4tCJOZMfg==,type:str]
+    GHOST_DOMAIN: ENC[AES256_GCM,data:GbJ7bpvgtxbkPAmrD/alPA==,iv:392IL4gn2Fp/M4taMo6ac9u3KQqrV4JC//Q3qLZCMq4=,tag:bTpt8Cm5HeKvI/9gnZgtyg==,type:str]
-    K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:BEuW2FuPLjvYALo07A==,iv:SWdQm9TqiEcNYDYdtgQ8sFzIFCh4MzE4y4g3zSdMW+o=,tag:VV6ZvYA2gxYMsYc3VdMaag==,type:str]
+    K8S_DASHBOARD_DOMAIN: ENC[AES256_GCM,data:ddiOPTz8EAQCO7leYw==,iv:OLWVzy0fEjcYd3m/qRN7ptaCaRtgfLhOSB+FkuX+R5c=,tag:275u7JwTf+byQMt3CJcqew==,type:str]
-    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:ROOumTFavn1VZI/CHTTUyvmCbuDGMJQ=,iv:XsHyu5th7JgaruqvWlHI1pG2NpMxtQsQOrmQYqJ4oUc=,tag:quAahRcsuslbb+L2ihwagg==,type:str]
+    LETSENCRYPT_EMAIL: ENC[AES256_GCM,data:0FVBtrUxWsU/I/b3w4DIFRlxxkMis+w=,iv:6RGsd6vypRsiYNnqeg2AvP/RY/JUAzBtPMPdX/dAOdY=,tag:d/4TtEp9LUAnWIhnkXVlXQ==,type:str]
-    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:fTF2cOxKT/AaDKUSxPV8fVI=,iv:fCsHOPBSgV+EV3xINN/WAnfXv+0Cv5o72ecUtawXnrY=,tag:5uWHsNnXTTmBERMNzY1Icg==,type:str]
+    GITEA_ADMIN_EMAIL: ENC[AES256_GCM,data:A2U19Cm5UFeWdVub+7B8qPI=,iv:ij5+j9Ij9kOaUkQpPGpwVQciiOy2fxbPjABkTGqcLDw=,tag:LWY/HGOKDmmQuzMd9TMnbw==,type:str]
-    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:YL05tAOHPrAFc6Iol5fId1I=,iv:y2+hIWo1cS8nBHyJjQ0Ay4/Evef34vDOnBT/OwMiny0=,tag:9DBBqLvvljsDRay4MTZx5A==,type:str]
+    GHOST_ADMIN_EMAIL: ENC[AES256_GCM,data:gdTlcuH9LD+qpL9Am1+tWdw=,iv:Jl+EFrBPemWa05DzZSWKi9JMZz0JuYrjDzbJc8ZaXnA=,tag:AUv7Rc/SCVucKTel6Hzzjg==,type:str]
-    LLAMACTL_DOMAIN: ENC[AES256_GCM,data:X1+WrSR4wnzadpnztbQyncBA,iv:/WVpPrCnNQ75ikz62wS08/M+4M2ByuWArp28WYgNVG4=,tag:F7D8+0atZpkHYFt/571eug==,type:str]
+    LLAMACTL_DOMAIN: ENC[AES256_GCM,data:mJlGDFhYuPLw8OBzr8y9l7fb,iv:3WmYMZr9tv8k7StqMVER4hBkjaZkQ/b1KMukadO735s=,tag:EDMHy4DA4r5ykpkWGadsVw==,type:str]
-    LLAMACTL_INTERNAL_IP: ENC[AES256_GCM,data:95WdatcQtNRuqiWV+oY=,iv:Y1QdWH+PcoLh1LTFbvaA4BFQunk8Lq8+zo4vR8e1PfY=,tag:I3s1LxZZ70htaJp1SXhPiw==,type:str]
+    LLAMACTL_TAILNET_FQDN: ENC[AES256_GCM,data:mPOZgK1wpFqI65A3IyT2tOH1iImi/9sPCHWjSFLgogcbdA==,iv:jgPeuPQlxREvAr3D0McRKhJjWmF+u4an6gOSKzgYVpo=,tag:KLo8QHce4tB/gYhZgLqLAA==,type:str]
-    LLAMACTL_INTERNAL_PORT: ENC[AES256_GCM,data:Y2ScMg==,iv:dvQpB/eIuoseZwd1yczZzm0jmgHgSEiT5405g0iWxdQ=,tag:XmVA/Da+R3AbPyVhcCXC/Q==,type:str]
 sops:
     age:
         - recipient: age1jk99rtxq3ep2xj2w886cchddf7jypqpwkr3dszg5dzq93gn8cy9qyc786m
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5M1V6aDFjLzhsUU8rd3lr
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvVHdkTzB2MzBBdVdleGZm
-            T0d4M080TDFXelV3a3FmUFNkZEdrbmk2cVZ3CjVscW92eGZRQXZhNWltSUZzZnZj
+            ditGUTZ3cTFDOVVQUWlTbVV1WVAvbml6anhVClZ0YmdnYkoxYzZ6dWpNL0xyWDBx
-            b3ZGYzdVM0pyUE1lSmZlMGM3bEF6Z1UKLS0tIFdWR2IvcUJiaGR0T1FLV0tpU0tY
+            WHpoM3NYQzBpaDdGWjR6eWJ5ZnUzdUUKLS0tICticWRYc0pmTUhWRVBhWjFoWTJX
-            SWhxaGkrWUZ2MURpemlRSWNqcDFKL1kKyfoWnUhfjKVhO4b6wYIfx+qeOymAm5iK
+            bnFkZ3hleUxFZnRHUXhiakc4QnRpNWMKxPKgotlcHznF/5EXcu9Wofrud9THZzQv
-            AKG6zJCugwd/tft0V0rj0udaCLE45CE66DHloX3l+pXQYXzbIDoDyQ==
+            jIdpIWSm2B1unI1FQKpdvzgCubkYxlnwBGcNarBIw41FM17a2UyHEg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-07-31T19:14:46Z"
+    lastmodified: "2025-07-31T19:51:57Z"
-    mac: ENC[AES256_GCM,data:OorhubDNJXUuGRv/ayLk1B3sZPgTTnDBVCBq2FklPrO/faB7lQeg+iw62X0P1lHFIZbGW1aGdJdQm1Iu3Fz4FBesqBMrYTWOZcgF+Xxr6nbaxOPParHKvZBpeg3NRhaNpXabDyiU9xptiZaWsN36J68TwlI3xzj5VeJqLsfEu1Q=,iv:oa6SLPY81oPoyvMmYUEq1zmJQWOxsVoe/ukeT/cBtkQ=,tag:aodpjgDV37NAeZm+xDtouA==,type:str]
+    mac: ENC[AES256_GCM,data:7c9IuwnsZ9K1Tgoy2fX+P2WriSFXGPS/xa9fyL3RsiOee/grjf8TH702Pk6yBP20vuZ4Y+jHugQbYEcP539KpOK1+WvNie4hv+z7zKsZqkHRRoEWYsHQkko4LFnBqvpHdZUsC+2+bWJukiJ4AIKajDL2yV0BPyWVK1Qav/f932c=,iv:Zf+vn9mwRPU2jsNsB4Uw/jJPjXDksLfBAEacG5IJB3E=,tag:+ZqfeJ5Y/gy7EO0yrZcMFQ==,type:str]
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.10.2