fix: add LSAR routes, fix default TLS cert (asephstech.pem → asepharyana.my.id.pem)

infra/traefik/dynamic/apps.yaml

@@ -1,71 +1,82 @@
 http:
   routers:
-    # ── React SPA (domain root) ──
-    react:
-      rule: 'Host(`asepharyana.my.id`) || Host(`asepharyana.web.id`)'
-      entryPoints:
-        - websecure
-      tls: {}
-      service: react-service
-
-    # ── Scraper API ──
-    scraper:
-      rule: 'Host(`scraper.asepharyana.my.id`) || Host(`api.asepharyana.my.id`) || Host(`scraper.asepharyana.web.id`) || Host(`api.asepharyana.web.id`)'
-      entryPoints:
-        - websecure
-      tls: {}
-      middlewares:
-        - common-chain@file
-      service: scraper-service
-
-    # ── Elysia API ──
     elysia:
-      rule: 'Host(`elysia.asepharyana.my.id`) || Host(`elysia.asepharyana.web.id`)'
       entryPoints:
-        - websecure
+      - websecure
-      tls: {}
       middlewares:
-        - common-chain@file
+      - common-chain@file
+      rule: Host(`elysia.asepharyana.my.id`) || Host(`elysia.asepharyana.web.id`)
       service: elysia-service
-
-    # ── Rust Auth API ──
-    rust-auth:
-      rule: 'Host(`auth.asepharyana.my.id`) || Host(`auth.asepharyana.web.id`)'
-      entryPoints:
-        - websecure
       tls: {}
-      middlewares:
+    lidm-backend:
-        - common-chain@file
+      entryPoints:
-      service: rust-auth-service
+      - websecure
-
+      rule: Host(`lidm-api.asepharyana.my.id`) && PathPrefix(`/api`)
-    # ── PR-Agent Webhook ──
+      service: lidm-backend-service
+      tls: {}
+    lidm-frontend:
+      entryPoints:
+      - websecure
+      rule: Host(`lidm.asepharyana.my.id`)
+      service: lidm-frontend-service
+      tls: {}
     pr-agent:
-      rule: 'Host(`pr-agent.asepharyana.my.id`) || Host(`pr-agent.asepharyana.web.id`)'
       entryPoints:
-        - websecure
+      - websecure
-      tls: {}
       middlewares:
-        - common-chain@file
+      - common-chain@file
+      rule: Host(`pr-agent.asepharyana.my.id`) || Host(`pr-agent.asepharyana.web.id`)
       service: pr-agent-service
-
+      tls: {}
+    react:
+      entryPoints:
+      - websecure
+      rule: Host(`asepharyana.my.id`) || Host(`asepharyana.web.id`)
+      service: react-service
+      tls: {}
+    rust-auth:
+      entryPoints:
+      - websecure
+      middlewares:
+      - common-chain@file
+      rule: Host(`auth.asepharyana.my.id`) || Host(`auth.asepharyana.web.id`)
+      service: rust-auth-service
+      tls: {}
+    scraper:
+      entryPoints:
+      - websecure
+      middlewares:
+      - common-chain@file
+      rule: Host(`scraper.asepharyana.my.id`) || Host(`api.asepharyana.my.id`) ||
+        Host(`scraper.asepharyana.web.id`) || Host(`api.asepharyana.web.id`)
+      service: scraper-service
+      tls: {}
   services:
-    react-service:
-      loadBalancer:
-        servers:
-          - url: 'http://react-web:80'
-    scraper-service:
-      loadBalancer:
-        servers:
-          - url: 'http://scraper-api:4091'
     elysia-service:
       loadBalancer:
         servers:
-          - url: 'http://elysia-api:4092'
+        - url: http://elysia-api:4092
-    rust-auth-service:
+    lidm-backend-service:
       loadBalancer:
         servers:
-          - url: 'http://rust-auth:3000'
+        - url: http://lidm-backend:3001
+    lidm-frontend-service:
+      loadBalancer:
+        servers:
+        - url: http://lidm-frontend:3000
     pr-agent-service:
       loadBalancer:
         servers:
-          - url: 'http://pr-agent-server:3000'
+        - url: http://pr-agent-server:3000
+    react-service:
+      loadBalancer:
+        servers:
+        - url: http://react-web:80
+    rust-auth-service:
+      loadBalancer:
+        servers:
+        - url: http://rust-auth:3000
+    scraper-service:
+      loadBalancer:
+        servers:
+        - url: http://scraper-api:4091

infra/traefik/dynamic/ssl.yaml

@@ -1,8 +1,5 @@
 tls:
   certificates:
-    # Legacy production layout: asephstech.pem is paired with asephscloud.key.
-    - certFile: /etc/traefik/certs/asephstech.pem
-      keyFile: /etc/traefik/certs/asephscloud.key
     - certFile: /etc/traefik/certs/asepharyana.my.id.pem
       keyFile: /etc/traefik/certs/asepharyana.my.id.key
     - certFile: /etc/traefik/certs/asepharyana.web.id.pem
@@ -10,5 +7,5 @@ tls:
   stores:
     default:
       defaultCertificate:
-        certFile: /etc/traefik/certs/asephstech.pem
+        certFile: /etc/traefik/certs/asepharyana.my.id.pem
-        keyFile: /etc/traefik/certs/asephscloud.key
+        keyFile: /etc/traefik/certs/asepharyana.my.id.key