From 7d5d0f86e709e17839e0f321ab6f8f3fc81caf57 Mon Sep 17 00:00:00 2001
From: Andrew Stoltz <andrew@flowercore.io>
Date: Thu, 9 Apr 2026 15:09:08 -0500
Subject: [PATCH] Add signage service ingress manifests

---
 apps/fc-dms/fc-dms.yaml                     | 32 +++++++++++++++++++++
 apps/fc-presentations/fc-presentations.yaml | 32 +++++++++++++++++++++
 apps/fc-scoreboard/fc-scoreboard.yaml       | 32 +++++++++++++++++++++
 3 files changed, 96 insertions(+)
 create mode 100644 apps/fc-dms/fc-dms.yaml
 create mode 100644 apps/fc-presentations/fc-presentations.yaml
 create mode 100644 apps/fc-scoreboard/fc-scoreboard.yaml

diff --git a/apps/fc-dms/fc-dms.yaml b/apps/fc-dms/fc-dms.yaml
new file mode 100644
index 0000000..e7ed166
--- /dev/null
+++ b/apps/fc-dms/fc-dms.yaml
@@ -0,0 +1,32 @@
+# FlowerCore DMS — TLS + Ingress
+# Deployment and Service managed by deploy script (not ArgoCD)
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: dms-web-tls
+  namespace: fc-dms
+spec:
+  secretName: dms-web-tls
+  issuerRef:
+    name: step-ca-acme
+    kind: ClusterIssuer
+  dnsNames:
+    - dms.iamworkin.lan
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: dms-web
+  namespace: fc-dms
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`dms.iamworkin.lan`)
+      kind: Rule
+      services:
+        - name: dms-web
+          port: 80
+  tls:
+    secretName: dms-web-tls
diff --git a/apps/fc-presentations/fc-presentations.yaml b/apps/fc-presentations/fc-presentations.yaml
new file mode 100644
index 0000000..5c41645
--- /dev/null
+++ b/apps/fc-presentations/fc-presentations.yaml
@@ -0,0 +1,32 @@
+# FlowerCore Presentations — TLS + Ingress
+# Deployment and Service managed by deploy script (not ArgoCD)
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: presentations-web-tls
+  namespace: fc-presentations
+spec:
+  secretName: presentations-web-tls
+  issuerRef:
+    name: step-ca-acme
+    kind: ClusterIssuer
+  dnsNames:
+    - presentations.iamworkin.lan
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: presentations-web
+  namespace: fc-presentations
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`presentations.iamworkin.lan`)
+      kind: Rule
+      services:
+        - name: presentations-web
+          port: 80
+  tls:
+    secretName: presentations-web-tls
diff --git a/apps/fc-scoreboard/fc-scoreboard.yaml b/apps/fc-scoreboard/fc-scoreboard.yaml
new file mode 100644
index 0000000..b403801
--- /dev/null
+++ b/apps/fc-scoreboard/fc-scoreboard.yaml
@@ -0,0 +1,32 @@
+# FlowerCore Scoreboard — TLS + Ingress
+# Deployment and Service managed by deploy script (not ArgoCD)
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: scoreboard-web-tls
+  namespace: fc-scoreboard
+spec:
+  secretName: scoreboard-web-tls
+  issuerRef:
+    name: step-ca-acme
+    kind: ClusterIssuer
+  dnsNames:
+    - scoreboard.iamworkin.lan
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: scoreboard-web
+  namespace: fc-scoreboard
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`scoreboard.iamworkin.lan`)
+      kind: Rule
+      services:
+        - name: scoreboard-web
+          port: 80
+  tls:
+    secretName: scoreboard-web-tls