{{- if .Values.ingress.enabled }}
# SSE streaming (POST /api/gateway) requires unbuffered proxying with long
# read timeouts; without these annotations approvals and live transcripts
# stall behind nginx buffering.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: teamclaw
  labels: {{- include "teamclaw.labels" . | nindent 4 }}
  annotations:
    nginx.ingress.kubernetes.io/proxy-buffering: "off"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
spec:
  ingressClassName: {{ .Values.ingress.className }}
  {{- if .Values.ingress.tlsSecretName }}
  tls:
    - hosts: [{{ .Values.ingress.host | quote }}]
      secretName: {{ .Values.ingress.tlsSecretName }}
  {{- end }}
  rules:
    - host: {{ .Values.ingress.host | quote }}
      http:
        paths:
          - path: /api
            pathType: Prefix
            backend:
              service:
                name: teamclaw-server
                port: { name: http }
          - path: /
            pathType: Prefix
            backend:
              service:
                name: teamclaw-frontend
                port: { name: http }
{{- end }}