feat(deploy) : serve sudloh.com alongside guide.sudloh.com

tests/deployment-contract.test.ts

@@ -25,7 +25,7 @@ describe("production deployment contract", () => {
     expect(deployment).toContain('drop: ["ALL"]');
   });
 
-  it("exposes only the app through the requested edge-TLS host", async () => {
+  it("exposes only the app through both edge-TLS hosts", async () => {
     const [service, ingress] = await Promise.all([
       repositoryFile("k8s/base/service.yaml"),
       repositoryFile("k8s/base/ingress.yaml"),
@@ -36,6 +36,7 @@ describe("production deployment contract", () => {
     expect(service).toContain("targetPort: http");
     expect(ingress).toContain("ingressClassName: traefik");
     expect(ingress).toContain("host: guide.sudloh.com");
+    expect(ingress).toContain("host: sudloh.com");
     expect(ingress).toContain(
       'traefik.ingress.kubernetes.io/read-timeout: "200"',
     );
@@ -129,6 +130,8 @@ describe("production deployment contract", () => {
     expect(workflow).toContain("bun run typecheck");
     expect(workflow).toContain("bun run lint");
     expect(workflow).toContain("kubectl kustomize k8s/");
+    expect(workflow).toContain("apply --filename k8s/base/ingress.yaml");
+    expect(workflow).toContain('\\"BETTER_AUTH_TRUSTED_ORIGINS\\":\\"$BETTER_AUTH_TRUSTED_ORIGINS\\"');
     expect(workflow).toContain("needs: verify");
     expect(workflow).not.toContain("pull_request:");
     expect(workflow).toContain("--insecure-skip-tls-verify=true");