From 56d4aec5c43558ba9b5b0fd042ef383788fd641a Mon Sep 17 00:00:00 2001
From: Bakery Admin <admin@bakewise.ai>
Date: Thu, 22 Jan 2026 11:30:36 +0100
Subject: [PATCH] Fix resources isues 6

---
 .../mail/mailu-helm/dev/mailu-ingress.yaml    | 32 ++++++++++++++++++
 .../mail/mailu-helm/mailu-ingress.yaml        | 22 ++++++++++---
 .../mail/mailu-helm/prod/mailu-ingress.yaml   | 33 +++++++++++++++++++
 3 files changed, 82 insertions(+), 5 deletions(-)
 create mode 100644 infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
 create mode 100644 infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml

diff --git a/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
new file mode 100644
index 00000000..e8026fa3
--- /dev/null
+++ b/infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml
@@ -0,0 +1,32 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: mailu-ingress
+  namespace: bakery-ia
+  labels:
+    app.kubernetes.io/name: mailu
+    app.kubernetes.io/component: ingress
+    environment: development
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - mail.bakery-ia.dev
+    secretName: bakery-dev-tls-cert
+  rules:
+  - host: mail.bakery-ia.dev
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: mailu-front
+            port:
+              number: 80
diff --git a/infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml
index 7f8a6256..0c204225 100644
--- a/infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml
+++ b/infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml
@@ -1,3 +1,15 @@
+# =============================================================================
+# Mailu Ingress Configuration
+# =============================================================================
+# This is the base ingress template. Use the environment-specific versions:
+#
+#   Development: dev/mailu-ingress.yaml  (mail.bakery-ia.dev)
+#   Production:  prod/mailu-ingress.yaml (mail.bakewise.ai)
+#
+# Deploy with:
+#   kubectl apply -f infrastructure/platform/mail/mailu-helm/dev/mailu-ingress.yaml   # for dev
+#   kubectl apply -f infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml  # for prod
+# =============================================================================
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -16,16 +28,16 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - mail.bakery-ia.dev
-    secretName: bakery-dev-tls-cert
+    - mail.DOMAIN_PLACEHOLDER
+    secretName: TLS_SECRET_PLACEHOLDER
   rules:
-  - host: mail.bakery-ia.dev
+  - host: mail.DOMAIN_PLACEHOLDER
     http:
       paths:
       - path: /
         pathType: Prefix
         backend:
           service:
-            name: mailu-front  # Helm release name 'mailu' + component 'front'
+            name: mailu-front
             port:
-              number: 80
\ No newline at end of file
+              number: 80
diff --git a/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
new file mode 100644
index 00000000..3644f1bb
--- /dev/null
+++ b/infrastructure/platform/mail/mailu-helm/prod/mailu-ingress.yaml
@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: mailu-ingress
+  namespace: bakery-ia
+  labels:
+    app.kubernetes.io/name: mailu
+    app.kubernetes.io/component: ingress
+    environment: production
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - mail.bakewise.ai
+    secretName: bakery-ia-prod-tls-cert
+  rules:
+  - host: mail.bakewise.ai
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: mailu-front
+            port:
+              number: 80