From cabfd1004d15bc0eb56bd2af4017f1fc7a56a548 Mon Sep 17 00:00:00 2001
From: Till JS <tills95@gmail.com>
Date: Mon, 27 Apr 2026 01:00:22 +0200
Subject: [PATCH] feat(infra): community.mana.how (instead of analytics.*) for
 the public-feedback hub
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

analytics.mana.how DNS already existed as a non-CNAME record — picking
the user-facing 'community.mana.how' subdomain instead. Added the
tunnel ingress + matched the CORS origin + client-side env var.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 cloudflared-config.yml     | 2 +-
 docker-compose.macmini.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/cloudflared-config.yml b/cloudflared-config.yml
index ac8a0945a..547dee29a 100644
--- a/cloudflared-config.yml
+++ b/cloudflared-config.yml
@@ -148,7 +148,7 @@ ingress:
     service: http://localhost:3065
   - hostname: research.mana.how
     service: http://localhost:3068
-  - hostname: analytics.mana.how
+  - hostname: community.mana.how
     service: http://localhost:3064
 
   # ============================================
diff --git a/docker-compose.macmini.yml b/docker-compose.macmini.yml
index 0f6251077..112fb88fa 100644
--- a/docker-compose.macmini.yml
+++ b/docker-compose.macmini.yml
@@ -587,7 +587,7 @@ services:
       # ("Wachsame Eule #4528"). Set in .env.macmini — rotation re-keys
       # only future pseudonyms, existing rows keep the old hash/name.
       FEEDBACK_PSEUDONYM_SECRET: ${FEEDBACK_PSEUDONYM_SECRET:?missing in .env.macmini}
-      CORS_ORIGINS: https://mana.how
+      CORS_ORIGINS: https://mana.how,https://community.mana.how
     ports:
       - "3064:3064"
     healthcheck:
@@ -950,7 +950,7 @@ services:
       # /api/v1/(public/)feedback/* endpoints directly; SSR uses the
       # internal docker-network URL.
       PUBLIC_MANA_ANALYTICS_URL: http://mana-analytics:3064
-      PUBLIC_MANA_ANALYTICS_URL_CLIENT: https://analytics.mana.how
+      PUBLIC_MANA_ANALYTICS_URL_CLIENT: https://community.mana.how
       # mana-ai background Mission Runner. Browser calls the audit
       # endpoint (/api/v1/me/ai-audit) to render the Workbench
       # "Datenzugriff" tab. SSR doesn't hit this service directly.