Default ingress to Traefik; nginx annotations as documented opt-in

README.md

@@ -120,9 +120,11 @@ For production prefer a values file, or create the Secret yourself and set
 
 Notes:
 
-- The default ingress annotations disable nginx's request body limit and
+- The chart defaults to Traefik, which needs no special config (no body-size
-  request buffering so multi-GB RAW uploads stream through. Adapt for other
+  limit, streaming by default). For ingress-nginx, set `ingress.className:
-  ingress controllers.
+  nginx` and the commented `proxy-body-size`/`proxy-request-buffering`
+  annotations in values.yaml — nginx's 1MiB default otherwise rejects RAW
+  uploads.
 - Migrations run automatically on startup of either binary (they take a
   Postgres advisory lock, so concurrent starts are safe).
 - Scale `worker.replicas` (or `worker.concurrency`) if imports queue up;

deploy/chart/values.yaml

@@ -55,12 +55,14 @@ service:
 
 ingress:
   enabled: true
-  className: nginx
+  className: traefik
   host: photos.example.com
-  annotations:
+  # Traefik needs nothing extra: no default body-size limit, streams uploads.
-    # Raw uploads are large; disable nginx's body size limit.
+  # For ingress-nginx set className: nginx and uncomment (multi-GB raw
-    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+  # uploads hit nginx's 1MiB default limit otherwise):
-    nginx.ingress.kubernetes.io/proxy-request-buffering: "off"
+  #   nginx.ingress.kubernetes.io/proxy-body-size: "0"
+  #   nginx.ingress.kubernetes.io/proxy-request-buffering: "off"
+  annotations: {}
   tls:
     enabled: true
     secretName: photos-tls