add onlyoffice, and ingress revision

deploy/infra/ingress.yaml

@@ -5,11 +5,10 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     kubernetes.io/ingress.class: traefik
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure, public-https
 spec:
   entryPoints:
     - websecure
-
+    - public-https
   tls:
     secretName: cloud-limbosolutions-com-tls
     domains:
@@ -34,7 +33,7 @@ spec:
           port: 8080
       middlewares:
         - name: rate-limit
-        - name: security-headers
+        - name: nextcloud-security-headers
 
     # 2) WEBDAV / SYNC CLIENTS (NO SSO)
     - match: Host(`cloud.limbosolutions.com`) && (PathPrefix(`/remote.php/dav`) || PathPrefix(`/remote.php/webdav`) || PathPrefix(`/remote.php/caldav`) || PathPrefix(`/remote.php/carddav`))
@@ -56,7 +55,7 @@ spec:
           # middleware managed by icarus
          - name: authentik-forward-auth
            namespace: kube-system
-         - name: security-headers
+         - name: nextcloud-security-headers
          - name: rate-limit