# tbi-rlv-mobile-api-proxy

Nginx reverse proxy exposing internal BFF services to the Redtag mobile app via a public ingress.

## Architecture

```
Mobile App → api-mobile.dev.tbidevelopment.ca (PUBLIC) → tbi-rlv-vacations-bff-service (INTERNAL)
                                                       → tbi-rlv-profile-backend-service (INTERNAL)
```

## Routes

| Path | Backend |
|------|---------|
| `/vacations/`, `/cars/`, `/attraction/`, `/dynamic/`, `/insurance/`, `/api/` | tbi-rlv-vacations-bff-service |
| `/profile/`, `/bookings/`, `/travellers/`, `/favourites/`, `/payments/` | tbi-rlv-profile-backend-service |
| `/health` | Returns 200 (no auth) |

## Security

Requires both `x-api-key` and `Authorization` headers on all routes except `/health`.

## Deploy (Dev)

```bash
CLUSTER_NAME=dev DEPLOY_ENV=dev bash scripts/deploy-services.sh
```

## Deploy (Prod)

Use the redtag-prod chart variant with `hostName: api-mobile.redtag.ca`.