Just the main ingress?

app-of-apps/immich.yaml

@@ -21,19 +21,20 @@ spec:
         valkey:
           enabled: true
         ingress:
-          enabled: true
-          annotations:
-            nginx.ingress.kubernetes.io/proxy-body-size: "0"
-            external-dns.alpha.kubernetes.io/target: home.martyn.berlin
-          hosts:
-          - host: immich.martyn.berlin
-            paths:
-            - path: "/"
-              service:
-                identifier: main
-          tls:
-          - hosts:
+          main:
+            enabled: true
+            annotations:
+              nginx.ingress.kubernetes.io/proxy-body-size: "0"
+              external-dns.alpha.kubernetes.io/target: home.martyn.berlin
+            hosts:
             - host: immich.martyn.berlin
+              paths:
+              - path: "/"
+                service:
+                  identifier: main
+            tls:
+            - hosts:
+              - host: immich.martyn.berlin
   - repoURL: http://forgejo.git.svc.cluster.local/martyn/infra4talos.git
     path: apps-kustomized/immich
   project: apps