From c7d1ece0c43946cc2f514c7cf19dc45793f2d774 Mon Sep 17 00:00:00 2001
From: Marcus Noble <github@marcusnoble.co.uk>
Date: Fri, 9 Oct 2026 09:49:24 +0100
Subject: [PATCH] Added hermes-hooks proxy

Signed-off-by: Marcus Noble <github@marcusnoble.co.uk>
---
 manifests/auth-proxy/internal-services.yaml | 34 ---------------------
 manifests/auth-proxy/non-auth-ingress.yaml  | 11 +++++++
 manifests/auth-proxy/proxy.yaml             |  6 +---
 3 files changed, 12 insertions(+), 39 deletions(-)

diff --git a/manifests/auth-proxy/internal-services.yaml b/manifests/auth-proxy/internal-services.yaml
index 1b3fc91..7abed63 100644
--- a/manifests/auth-proxy/internal-services.yaml
+++ b/manifests/auth-proxy/internal-services.yaml
@@ -83,37 +83,3 @@ spec:
     app: internal-proxy
   type: ClusterIP
 ---
-apiVersion: v1
-kind: Service
-metadata:
-  name: hermes
-  namespace: auth-proxy
-  labels:
-    app: internal-proxy
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 8080
-  selector:
-    app: internal-proxy
-  type: ClusterIP
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: ollama
-  namespace: auth-proxy
-  labels:
-    app: internal-proxy
-spec:
-  ports:
-  - name: http
-    port: 80
-    protocol: TCP
-    targetPort: 8080
-  selector:
-    app: internal-proxy
-  type: ClusterIP
----
diff --git a/manifests/auth-proxy/non-auth-ingress.yaml b/manifests/auth-proxy/non-auth-ingress.yaml
index 2ad29de..641635d 100644
--- a/manifests/auth-proxy/non-auth-ingress.yaml
+++ b/manifests/auth-proxy/non-auth-ingress.yaml
@@ -19,6 +19,7 @@ spec:
     - bsky-feeds.cluster.fun
     - ai.cluster.fun
     - penpot.cluster.fun
+    - hermes-hooks.cluster.fun
     secretName: non-auth-proxy-ingress
   rules:
   - host: hello-world.cluster.fun
@@ -71,3 +72,13 @@ spec:
             name: tailscale-proxy
             port:
               name: non-auth
+  - host: hermes-hooks.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: tailscale-proxy
+            port:
+              name: non-auth
diff --git a/manifests/auth-proxy/proxy.yaml b/manifests/auth-proxy/proxy.yaml
index 9574d1f..7e21f49 100644
--- a/manifests/auth-proxy/proxy.yaml
+++ b/manifests/auth-proxy/proxy.yaml
@@ -13,11 +13,7 @@ data:
       "loki.auth-proxy.svc": "loki-write.cluster.local",
       "loki.auth-proxy.svc:80": "loki-write.cluster.local",
       "loki-distributed.auth-proxy.svc": "loki-loki.cluster.local",
-      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local",
-      "hermes.auth-proxy.svc": "hermes.cluster.local",
-      "hermes.auth-proxy.svc:80": "hermes.cluster.local",
-      "ollama.auth-proxy.svc": "ollama.cluster.local",
-      "ollama.auth-proxy.svc:11434": "ollama.cluster.local"
+      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local"
     }
 ---
 apiVersion: apps/v1