Route komposthaufen to verified read-only Copyparty service

apps/copyparty/README.md

@@ -13,7 +13,8 @@ Anonymous users receive only `r` (read/list/download) permission. No account
 has upload, move, delete or admin permission. The non-root container also mounts
 `/komposthaufen` recursively read-only. Symlinks cannot escape the exported
 volume. HTML is served as text and embedded directory prologues are disabled.
-The Traefik route preserves the URL prefix; Copyparty's `rp-loc` handles it.
+The Traefik-owned route keeps its name but moves from `default` to `copyparty`
+to avoid enabling cross-namespace routing globally. It preserves the URL prefix; Copyparty's `rp-loc` handles it.
 Direct downloads, HEAD and HTTP byte ranges retain their normal URL shape.
 
 The writable RBD PVC contains rebuildable SQLite search indexes, thumbnails and

apps/traefik/routes/copyparty-ingressroute-komposthaufen.json

@@ -3,7 +3,7 @@
   "kind": "IngressRoute",
   "metadata": {
     "name": "komposthaufen",
-    "namespace": "default"
+    "namespace": "copyparty"
   },
   "spec": {
     "entryPoints": [
@@ -12,11 +12,11 @@
     "routes": [
       {
         "kind": "Rule",
-        "match": "Host(`brunner.ninja`) && PathPrefix(`/komposthaufen`)",
+        "match": "Host(`brunner.ninja`) && (Path(`/komposthaufen`) || PathPrefix(`/komposthaufen/`))",
         "services": [
           {
             "kind": "Service",
-            "name": "legacy-apache-service",
+            "name": "copyparty",
             "port": "http"
           }
         ]

bootstrap/copyparty.yaml

@@ -22,5 +22,5 @@ spec:
   syncPolicy:
     automated:
       enabled: true
-      prune: false
+      prune: true
       selfHeal: true

bootstrap/traefik-project.yaml

@@ -9,6 +9,8 @@ spec:
   - https://traefik.github.io/charts
   - https://code.brunner.ninja/feedc0de/homelab-gitops.git
   destinations:
+  - namespace: copyparty
+    server: https://kubernetes.default.svc
   - namespace: default
     server: https://kubernetes.default.svc
   - namespace: garrysmod