From c8585fd320e151cf9b1b8e89671daa1a5ed7377a Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sun, 8 Feb 2026 14:30:35 +0200
Subject: Add immich LAN ingress and remove unsupported helm config

- Created custom ingress-lan.yaml for immich.f3s.lan.buetow.org with TLS
- Removed unsupported 'lan' ingress config from ArgoCD app values
- The Immich Helm chart doesn't support multiple named ingresses,
  so we create the LAN ingress as a custom resource instead

This aligns immich with other services that have both regular and
LAN ingress endpoints.
---
 f3s/argocd-apps/services/immich.yaml             | 17 ----------------
 f3s/immich/helm-chart/templates/ingress-lan.yaml | 26 ++++++++++++++++++++++++
 2 files changed, 26 insertions(+), 17 deletions(-)
 create mode 100644 f3s/immich/helm-chart/templates/ingress-lan.yaml

diff --git a/f3s/argocd-apps/services/immich.yaml b/f3s/argocd-apps/services/immich.yaml
index d8870eb..32c7d11 100644
--- a/f3s/argocd-apps/services/immich.yaml
+++ b/f3s/argocd-apps/services/immich.yaml
@@ -61,23 +61,6 @@ spec:
                         service:
                           identifier: main
                           port: 2283
-              lan:
-                enabled: true
-                annotations:
-                  spec.ingressClassName: traefik
-                  traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
-                  traefik.ingress.kubernetes.io/router.middlewares: services-immich-body-size@kubernetescrd
-                tls:
-                  - hosts:
-                      - immich.f3s.lan.buetow.org
-                    secretName: f3s-lan-tls
-                hosts:
-                  - host: immich.f3s.lan.buetow.org
-                    paths:
-                      - path: "/"
-                        service:
-                          identifier: main
-                          port: 2283
           machine-learning:
             enabled: true
             persistence:
diff --git a/f3s/immich/helm-chart/templates/ingress-lan.yaml b/f3s/immich/helm-chart/templates/ingress-lan.yaml
new file mode 100644
index 0000000..8309b3c
--- /dev/null
+++ b/f3s/immich/helm-chart/templates/ingress-lan.yaml
@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: immich-server-lan
+  namespace: services
+  annotations:
+    spec.ingressClassName: traefik
+    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+    traefik.ingress.kubernetes.io/router.middlewares: services-immich-body-size@kubernetescrd
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - immich.f3s.lan.buetow.org
+      secretName: f3s-lan-tls
+  rules:
+    - host: immich.f3s.lan.buetow.org
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: immich-server
+                port:
+                  number: 2283
-- 
cgit v1.2.3