fix: add nginx sidecar for Bitwarden well-known endpoint

This fixes iOS app connection issues by properly responding to
/.well-known/bitwarden/ endpoint which iOS clients use to identify
the server.

apps/vaultwarden/manifests/vaultwarden-deployment.yaml

@@ -25,7 +25,7 @@ spec:
               memory: "512Mi"
               cpu: "500m"
           ports:
-            - containerPort: 80
+            - containerPort: 3000
           env:
             - name: WEBSOCKET_ENABLED
               value: "true"
@@ -40,7 +40,7 @@ spec:
           livenessProbe:
             httpGet:
               path: /alive
-              port: 80
+              port: 3000
             initialDelaySeconds: 30
             periodSeconds: 10
             timeoutSeconds: 5
@@ -48,7 +48,7 @@ spec:
           readinessProbe:
             httpGet:
               path: /alive
-              port: 80
+              port: 3000
             initialDelaySeconds: 5
             periodSeconds: 10
             timeoutSeconds: 5
@@ -56,7 +56,36 @@ spec:
           volumeMounts:
             - mountPath: "/data"
               name: data-vol
+        - name: nginx-well-known
+          image: nginx:alpine
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "50m"
+            limits:
+              memory: "64Mi"
+              cpu: "100m"
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - mountPath: "/etc/nginx/conf.d"
+              name: nginx-config
+          livenessProbe:
+            httpGet:
+              path: /alive
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /alive
+              port: 8080
+            initialDelaySeconds: 3
+            periodSeconds: 10
       volumes:
         - name: data-vol
           persistentVolumeClaim:
             claimName: vaultwarden-pvc
+        - name: nginx-config
+          configMap:
+            name: nginx-well-known-config