From 5fe79e75309b0feed4bec86ba56a503fd841c191 Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Mon, 13 Jul 2026 00:50:23 +0300
Subject: [PATCH] fix: set S3_HOSTNAME to public domain, add minio ingress
 route

---
 argocd/apps/mastodon.yaml             |  2 +-
 manifests/mastodon/ingress-minio.yaml | 27 +++++++++++++++++++++++++++
 2 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 manifests/mastodon/ingress-minio.yaml

diff --git a/argocd/apps/mastodon.yaml b/argocd/apps/mastodon.yaml
index 23a8eb1..cd233d3 100644
--- a/argocd/apps/mastodon.yaml
+++ b/argocd/apps/mastodon.yaml
@@ -36,7 +36,7 @@ spec:
 
             s3:
               enabled: true
-              hostname: minio.minio.svc.cluster.local
+              hostname: mastodon.t0rt1k.tech
               endpoint: http://minio.minio.svc.cluster.local
               protocol: http
               bucket: mastodon
diff --git a/manifests/mastodon/ingress-minio.yaml b/manifests/mastodon/ingress-minio.yaml
new file mode 100644
index 0000000..a6699bc
--- /dev/null
+++ b/manifests/mastodon/ingress-minio.yaml
@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: mastodon-minio
+  namespace: mastodon
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    traefik.ingress.kubernetes.io/router.priority: "20"
+spec:
+  ingressClassName: traefik
+  tls:
+    - secretName: mastodon-tls
+      hosts:
+        - mastodon.t0rt1k.tech
+  rules:
+    - host: mastodon.t0rt1k.tech
+      http:
+        paths:
+          - path: /mastodon/
+            pathType: Prefix
+            backend:
+              service:
+                name: minio
+                port:
+                  number: 80