feat: single-port architecture and browser warning fixes (#390)

k8s/configmap.yaml

@@ -16,8 +16,3 @@ data:
 
   # Logging — auto-detects K8s and uses JSON format
   KANDEV_LOG_LEVEL: info
-
-  # Public URL — set when behind a reverse proxy / ingress that serves both
-  # web and API on the same domain. Without this, the UI tries to reach the
-  # backend API on port 8080 directly, which fails behind a proxy.
-  # KANDEV_PUBLIC_URL: "https://kandev.example.com"

k8s/deployment.yaml

@@ -24,9 +24,6 @@ spec:
             - name: backend
               containerPort: 8080
               protocol: TCP
-            - name: web
-              containerPort: 3000
-              protocol: TCP
           envFrom:
             - configMapRef:
                 name: kandev-config

k8s/ingress.yaml

@@ -18,33 +18,10 @@ spec:
     - host: kandev.example.com
       http:
         paths:
-          # Backend API + WebSocket
-          - path: /api
-            pathType: Prefix
-            backend:
-              service:
-                name: kandev
-                port:
-                  name: backend
-          - path: /ws
-            pathType: Prefix
-            backend:
-              service:
-                name: kandev
-                port:
-                  name: backend
-          - path: /health
-            pathType: Exact
-            backend:
-              service:
-                name: kandev
-                port:
-                  name: backend
-          # Web UI (catch-all)
           - path: /
             pathType: Prefix
             backend:
               service:
                 name: kandev
                 port:
-                  name: web
+                  name: http

k8s/service.yaml

@@ -9,11 +9,7 @@ spec:
   selector:
     app: kandev
   ports:
-    - name: backend
+    - name: http
       port: 8080
       targetPort: backend
       protocol: TCP
-    - name: web
-      port: 3000
-      targetPort: web
-      protocol: TCP