fix(frontend): enable IPv6 listeners for public frontends

ircs-prod/core/manifests/frontend-portal-admin.yaml

@@ -26,6 +26,7 @@ data:
 
     server {
         listen 80;
+        listen [::]:80;
         server_name _;
         client_max_body_size 50m;
 
@@ -107,6 +108,7 @@ data:
 
     server {
         listen 8080;
+        listen [::]:8080;
         server_name _;
         client_max_body_size 50m;
 
@@ -219,6 +221,53 @@ data:
     }
 ---
 apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ircs-admin-frontend-nginx
+  namespace: ircs-prod
+  labels:
+    app.kubernetes.io/part-of: ircs
+    environment: prod
+data:
+  default.conf: |
+    server {
+        listen 80;
+        listen [::]:80;
+        server_name localhost;
+
+        gzip on;
+        gzip_min_length 1k;
+        gzip_comp_level 6;
+        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/json;
+
+        location / {
+            root   /usr/share/nginx/html;
+            index  index.html index.htm;
+            try_files $uri $uri/ /index.html;
+        }
+
+        location /api/ {
+            proxy_pass http://ircs-admin-bff.ircs-prod.svc.cluster.local:8080/api/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_buffering off;
+            proxy_cache off;
+            proxy_http_version 1.1;
+            proxy_set_header Connection "";
+
+            proxy_read_timeout 3600s;
+            proxy_send_timeout 3600s;
+        }
+
+        location /media/ {
+            proxy_pass http://ircs-admin-bff.ircs-prod.svc.cluster.local:8080/media/;
+        }
+    }
+---
+apiVersion: v1
 kind: Service
 metadata:
   name: ircs-portal-frontend
@@ -313,7 +362,7 @@ spec:
         environment: prod
       annotations:
         ircs.prodigalgal.com/no-public-route: "true"
-        ircs.prodigalgal.com/config-version: "bff-20260606-1"
+        ircs.prodigalgal.com/config-version: "ipv6-listen-20260615-1"
     spec:
       imagePullSecrets:
         - name: registry-secret
@@ -327,6 +376,8 @@ spec:
           env:
             - name: BACKEND_URL
               value: http://ircs-frontend-gateway.ircs-prod.svc.cluster.local:80
+            - name: HOSTNAME
+              value: "::"
           resources:
             requests:
               cpu: 25m
@@ -385,6 +436,11 @@ spec:
           ports:
             - name: http
               containerPort: 80
+          volumeMounts:
+            - name: nginx-config
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
+              readOnly: true
           resources:
             requests:
               cpu: 10m
@@ -406,6 +462,10 @@ spec:
             initialDelaySeconds: 20
             periodSeconds: 20
             timeoutSeconds: 3
+      volumes:
+        - name: nginx-config
+          configMap:
+            name: ircs-admin-frontend-nginx
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -433,7 +493,7 @@ spec:
         environment: prod
       annotations:
         ircs.prodigalgal.com/no-public-route: "true"
-        ircs.prodigalgal.com/config-version: "bff-20260606-1"
+        ircs.prodigalgal.com/config-version: "ipv6-listen-20260615-1"
     spec:
       containers:
         - name: nginx