Add Docuseal e-signature service at sign.neuralplatform.ai

- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret - Argo CD app watching servers/legion/k8s/docuseal - CF tunnel ingress rule for sign.neuralplatform.ai - Vault secret at secret/docuseal (secret_key_base seeded)
2026-04-21 14:26:01 -05:00
parent 3b3811942c
commit d40fb8c3f1
6 changed files with 145 additions and 0 deletions
@@ -153,6 +153,15 @@ resource "cloudflare_zero_trust_tunnel_cloudflared_config" "legion" {
      }
    }

+    # sign.neuralplatform.ai — Docuseal e-signature
+    ingress_rule {
+      hostname = "sign.neuralplatform.ai"
+      service  = "https://traefik.kube-system.svc:443"
+      origin_request {
+        no_tls_verify = true
+      }
+    }
+
    # Catch-all — must be last
    ingress_rule {
      service = "http_status:404"