🧱 Fix listener redirecting to http

Author: KONFeature

apps/listener/nginx.conf

@@ -2,6 +2,12 @@ server {
     listen       80;
     server_name  localhost;
 
+    # Use X-Forwarded-Proto from ingress, fallback to $scheme
+    set $real_scheme $scheme;
+    if ($http_x_forwarded_proto = 'https') {
+        set $real_scheme https;
+    }
+
     # Enable gzip compression
     gzip on;
     gzip_vary on;
@@ -40,8 +46,8 @@ server {
         }
     }
 
-    # Redirect bare /listener to /listener/
+    # Redirect bare /listener to /listener/ (preserve HTTPS scheme from ingress)
     location = /listener {
-        return 301 /listener/;
+        return 301 $real_scheme://$host/listener/;
     }
 }

infra/gcp/wallet.ts

@@ -229,9 +229,9 @@ export const walletService = new KubernetesService(
 
         // Ingress config with path-based routing
         ingress: {
-            host: `${subDomain}.${baseDomainName}`,
+            host: `${subDomain}.frak.id`,
             tlsSecretName: "wallet-tls",
-            additionalHosts: [`${subDomain}.frak.id`],
+            additionalHosts: [`wallet.${baseDomainName}`],
             // Route /listener to the listener service
             pathRoutes: [
                 {