feat(certificates): add TLS certificate and ingress configuration for sinceai.com

apps/apps/sinceai/certificate-sinceai-com.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: sinceai-com-crt
+  namespace: apps
+spec:
+  secretName: sinceai-com-crt
+  issuerRef:
+    name: dnspod
+    kind: ClusterIssuer
+    group: cert-manager.io
+  dnsNames:
+    - "sinceai.com"
+    - "*.sinceai.com"

apps/apps/sinceai/ingress-shop.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sinceai-shop
+  namespace: apps
+  annotations:
+    # 302 跳转到https://sinceai.taobao.com/
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      rewrite ^/(.*)$ https://sinceai.taobao.com/$1? permanent;
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: shop.sinceai.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: halo
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - shop.sinceai.com
+      secretName: sinceai-com-crt
+

apps/infra/net/tailscale/helmchart-hk.yaml

@@ -11,6 +11,8 @@ spec:
   valuesContent: |-
     nodeSelector:
       kubernetes.io/hostname: tchk
+    image:
+      tag: v1.90.6
     hostNetwork: true
     extraVolumes:
       - name: cert-volume

apps/infra/net/tailscale/helmchart-sh.yaml

@@ -11,6 +11,8 @@ spec:
   valuesContent: |-
     nodeSelector:
       kubernetes.io/hostname: tcd
+    image:
+      tag: v1.90.6
     hostNetwork: true
     extraVolumes:
       - name: cert-volume