FEAT(umami): allow public share URLs

- Split ingress into public (umami-share) and protected (umami-ingress)
- Public paths: /share, /api/share, /_next, /script.js
- Protected paths: everything else (requires Authelia SSO)

umami/ingress.yaml

@@ -1,4 +1,4 @@
-# Public Ingress - Share URLs (no auth required)
+# Public Ingress - Share URLs and required resources (no auth required)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -16,6 +16,7 @@ spec:
     - host: umami0213.kro.kr
       http:
         paths:
+          # Share page
           - path: /share
             pathType: Prefix
             backend:
@@ -23,6 +24,30 @@ spec:
                 name: umami
                 port:
                   number: 3000
+          # Share API
+          - path: /api/share
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+          # Next.js static files
+          - path: /_next
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+          # Tracking script (also public)
+          - path: /script.js
+            pathType: Exact
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
 ---
 # Protected Ingress - Dashboard (Authelia SSO required)
 apiVersion: networking.k8s.io/v1