Enforce HTTPS canonical Studio routes

2026-09-05 20:57:12 +00:00 · 2026-09-05 20:57:12 +00:00 · 0887fa233c
commit 0887fa233c
parent cca2521932
3 changed files with 16 additions and 1 deletions
--- a/infrastructure/gateway/envoy/routes/forgejo.yaml
+++ b/infrastructure/gateway/envoy/routes/forgejo.yaml
@ -17,6 +17,7 @@ spec:
      filters:
        - type: RequestRedirect
          requestRedirect:
+            scheme: https
            path:
              type: ReplaceFullPath
              replaceFullPath: /services/studio/forgejo/
--- a/infrastructure/gateway/envoy/routes/openproject.yaml
+++ b/infrastructure/gateway/envoy/routes/openproject.yaml
@ -12,8 +12,21 @@ spec:
  rules:
    - matches:
        - path:
-            type: PathPrefix
+            type: Exact
            value: /services/studio/openproject
+      filters:
+        - type: RequestRedirect
+          requestRedirect:
+            scheme: https
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: /services/studio/openproject/
+            statusCode: 301
+
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /services/studio/openproject/
      backendRefs:
        - name: openproject
          port: 8080
--- a/infrastructure/gateway/envoy/routes/pgadmin.yaml
+++ b/infrastructure/gateway/envoy/routes/pgadmin.yaml
@ -17,6 +17,7 @@ spec:
      filters:
        - type: RequestRedirect
          requestRedirect:
+            scheme: https
            path:
              type: ReplaceFullPath
              replaceFullPath: /services/studio/pgadmin/