From adda2a06298d04053324abd9a93656eee236c6a0 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Fri, 17 Apr 2026 23:27:41 +0300
Subject: f3s/anki-sync-server: add debug NodePort service on 30800

Exposes anki-sync-server directly on all k3s nodes at NodePort 30800,
bypassing Traefik. Used to isolate whether the HTTP 303 stream failures
(Anki client maps zstd body read errors to SEE_OTHER) originate in the
Traefik HTTP proxy layer or in the pod itself.
---
 .../helm-chart/templates/service.yaml              | 23 ++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/f3s/anki-sync-server/helm-chart/templates/service.yaml b/f3s/anki-sync-server/helm-chart/templates/service.yaml
index a8eb183..c93a27c 100644
--- a/f3s/anki-sync-server/helm-chart/templates/service.yaml
+++ b/f3s/anki-sync-server/helm-chart/templates/service.yaml
@@ -13,3 +13,26 @@ spec:
       targetPort: 8080
   selector:
     app: anki-sync-server
+---
+# Debug NodePort: exposes anki-sync-server directly on all k3s nodes at port
+# 30800, bypassing Traefik entirely. Used to isolate whether stream failures
+# (reported by the Anki client as HTTP 303) occur in the Traefik layer or in
+# the pod itself. Test from blowfish:
+#   doas curl -v http://192.168.2.120:30800/sync/hostKey -F 'u=paul' -F 'p=...'
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: anki-sync-server
+  name: anki-sync-server-nodeport
+  namespace: services
+spec:
+  type: NodePort
+  ports:
+    - name: web
+      port: 8080
+      protocol: TCP
+      targetPort: 8080
+      nodePort: 30800
+  selector:
+    app: anki-sync-server
-- 
cgit v1.2.3