Externalize networking (welcome Wild Central!)

polis/versions/dev/ingress.yaml

@@ -2,10 +2,6 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: polis
-  annotations:
-    external-dns.alpha.kubernetes.io/target: {{ .externalDnsDomain }}
-    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
-    external-dns.alpha.kubernetes.io/ttl: "60"
 spec:
   ingressClassName: traefik
   rules:
@@ -19,7 +15,3 @@ spec:
                 name: polis-file-server
                 port:
                   number: 80
-  tls:
-    - hosts:
-        - {{ .domain }}
-      secretName: {{ .tlsSecretName }}

polis/versions/dev/manifest.yaml

@@ -1,11 +1,9 @@
-version: 2025.06-1
+version: 2025.06-2
 requires:
-  - name: postgres
+- name: postgres
 defaultConfig:
   namespace: polis
   domain: polis.{{ .cloud.domain }}
-  externalDnsDomain: '{{ .cloud.domain }}'
-  tlsSecretName: wildcard-wild-cloud-tls
   adminEmail: '{{ .operator.email }}'
   db:
     host: '{{ .apps.postgres.host }}'
@@ -13,11 +11,12 @@ defaultConfig:
     name: polis
     user: polis
 defaultSecrets:
-  - key: dbPassword
-  - key: dbUrl
-    default: "postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable"
-  - key: loginCodePepper
-  - key: jwtPrivateKey
-  - key: jwtPublicKey
+- key: dbPassword
+- key: dbUrl
+  default: postgresql://{{ .app.db.user }}:{{ .secrets.dbPassword }}@{{ .app.db.host
+    }}:{{ .app.db.port }}/{{ .app.db.name }}?sslmode=disable
+- key: loginCodePepper
+- key: jwtPrivateKey
+- key: jwtPublicKey
 requiredSecrets:
-  - postgres.password
+- postgres.password