From c45f9f93bab55ff71d321072b9230693f0925cce Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Sat, 3 Jan 2026 15:21:53 +0900
Subject: [PATCH] FEAT(authelia): bypass share link in authelia

- Add bypass rule for share link paths
- Allow public access to share URLs
---
 umami/ingress.yaml | 28 +++++++++++++++++++++++++++-
 1 file changed, 27 insertions(+), 1 deletion(-)

diff --git a/umami/ingress.yaml b/umami/ingress.yaml
index fe4ddf0..b89196a 100644
--- a/umami/ingress.yaml
+++ b/umami/ingress.yaml
@@ -1,10 +1,36 @@
+# Public Ingress - Share URLs (no auth required)
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: umami-share
+  namespace: umami
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - umami0213.kro.kr
+    secretName: umami-tls
+  rules:
+    - host: umami0213.kro.kr
+      http:
+        paths:
+          - path: /share
+            pathType: Prefix
+            backend:
+              service:
+                name: umami
+                port:
+                  number: 3000
+---
+# Protected Ingress - Dashboard (Authelia SSO required)
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: umami-ingress
   namespace: umami
   annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
     traefik.ingress.kubernetes.io/router.middlewares: authelia-authelia-auth@kubernetescrd
 spec:
   ingressClassName: traefik