From 3a6c4c9d4ecb8d3251e0723f67759366fd297ceb Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Sat, 3 Jan 2026 15:24:11 +0900
Subject: [PATCH] FEAT(umami): allow public share URLs

- Split ingress into public (umami-share) and protected (umami-ingress)
- Public paths: /share, /api/share, /_next, /script.js
- Protected paths: everything else (requires Authelia SSO)
---
 umami/ingress.yaml | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/umami/ingress.yaml b/umami/ingress.yaml
index b89196a..99da392 100644
--- a/umami/ingress.yaml
+++ b/umami/ingress.yaml
@@ -1,4 +1,4 @@
-# Public Ingress - Share URLs (no auth required)
+# Public Ingress - Share URLs and required resources (no auth required)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -16,6 +16,7 @@ spec:
     - host: umami0213.kro.kr
       http:
         paths:
+          # Share page
           - path: /share
             pathType: Prefix
             backend:
@@ -23,6 +24,30 @@ spec:
                 name: umami
                 port:
                   number: 3000
+          # Share API
+          - path: /api/share
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+          # Next.js static files
+          - path: /_next
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+          # Tracking script (also public)
+          - path: /script.js
+            pathType: Exact
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
 ---
 # Protected Ingress - Dashboard (Authelia SSO required)
 apiVersion: networking.k8s.io/v1