Add login alias and record CoulombCore DNS inventory

sso-mfa/k8s/authelia/ingress.yaml

@@ -1,7 +1,7 @@
 # Ingress — Authelia login portal (namespace: sso)
 #
-# auth.coulomb.social — Authelia login page; browsers are redirected here
-#                       by KeyCape during the OIDC authorization flow.
+# auth.coulomb.social — canonical Authelia OIDC endpoint used by KeyCape.
+# login.coulomb.social — user-facing alias for the same login portal.
 #
 # This hostname MUST be publicly reachable: users' browsers redirect here
 # to enter their password. (MFA happens at the KeyCape layer, not here.)
@@ -33,7 +33,18 @@ spec:
                 name: authelia
                 port:
                   number: 9091
+    - host: login.coulomb.social
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: authelia
+                port:
+                  number: 9091
   tls:
     - secretName: auth-tls
       hosts:
         - auth.coulomb.social
+        - login.coulomb.social