change endpoits

clusters/cl01tl/management/argo-workflows/templates/service.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
   annotations:
-    tailscale.com/tailnet-fqdn: garage-ps10rp.boreal-beaufort.ts.net
+    tailscale.com/tailnet-fqdn: garage-ps10rp.boreal-beaufort.ts.net.s3
 spec:
   externalName: placeholder
   type: ExternalName

clusters/cl01tl/management/argo-workflows/values.yaml

@@ -114,7 +114,7 @@ postgres-17-cluster:
       - name: garage
         destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
         index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
+        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net.s3
         endpointCredentials: argo-workflows-postgresql-17-cluster-backup-secret-weekly
         retentionPolicy: "30d"
         isWALArchiver: false

hosts/ps10rp/garage/garage.toml

@@ -16,11 +16,11 @@ allow_world_readable_secrets = false
 [s3_api]
 s3_region = "garage"
 api_bind_addr = "[::]:3900"
-root_domain = ".s3.garage.alexlebens.net"
+root_domain = "garage-ps10rp.boreal-beaufort.ts.net.s3"
 
 [s3_web]
 bind_addr = "[::]:3902"
-root_domain = ".web.garage.alexlebens.net"
+root_domain = "garage-ps10rp.boreal-beaufort.ts.net.web"
 add_host_to_metrics = true
 
 [admin]

hosts/ps10rp/garage/serve.json

@@ -12,28 +12,28 @@
         }
       }
     },
-    "${TS_CERT_DOMAIN}.s3:3900": {
+    "${TS_CERT_DOMAIN}.s3:443": {
       "Handlers": {
         "/": {
           "Proxy": "http://127.0.0.1:3900"
         }
       }
     },
-    "${TS_CERT_DOMAIN}.rpc:3901": {
+    "${TS_CERT_DOMAIN}.rpc:443": {
       "Handlers": {
         "/": {
           "Proxy": "http://127.0.0.1:3901"
         }
       }
     },
-    "${TS_CERT_DOMAIN}.web:3902": {
+    "${TS_CERT_DOMAIN}.web:443": {
       "Handlers": {
         "/": {
           "Proxy": "http://127.0.0.1:3902"
         }
       }
     },
-    "${TS_CERT_DOMAIN}.api:3903": {
+    "${TS_CERT_DOMAIN}.api:443": {
       "Handlers": {
         "/": {
           "Proxy": "http://127.0.0.1:3903"