feat: configure HTTP/HTTPS public entry and managed certificates

backend/internal/api/identity_gateway_test.go

@@ -19,7 +19,7 @@ func TestAuthGatewayPortFollowsRunningOIDCTunnel(t *testing.T) {
 	}
 	check := func(want int) {
 		t.Helper()
-		got, err := authGatewayPort("vpn.example.com")
+		got, err := authGatewayPort("https://vpn.example.com")
 		if err != nil || got != want {
 			t.Fatalf("gateway port = %d, %v; want %d", got, err, want)
 		}
@@ -29,7 +29,7 @@ func TestAuthGatewayPortFollowsRunningOIDCTunnel(t *testing.T) {
 		t.Fatal(err)
 	}
 	check(19090)
-	if port, err := authGatewayPort("other.example.com"); err != nil || port != 0 {
+	if port, err := authGatewayPort("https://other.example.com"); err != nil || port != 0 {
 		t.Fatalf("wrong domain routed: %d, %v", port, err)
 	}
 	if err := store.DB.Model(&line).Update("state", "stopped").Error; err != nil {