Non standard usage of Umbraco hosted in kubernetes snippets

Dockerfile

FROM mcr.microsoft.com/dotnet/aspnet:6.0 AS base
LABEL maintainer="Bogdan Kosarevskyi <bogdan.kosarevskyi@gmail.com>"
LABEL vendor="UKAD"
WORKDIR /app
EXPOSE 80 443

FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build
WORKDIR /src
COPY ["Inventory.Presentation/Inventory.Presentation.csproj", "Inventory.Presentation/"]
RUN dotnet restore "Inventory.Presentation/Inventory.Presentation.csproj"
COPY . .
WORKDIR "/src/Inventory.Presentation"
RUN dotnet publish "Inventory.Presentation.csproj" -c Release -o /app

FROM base AS final
COPY --from=build /app .
ENTRYPOINT ["dotnet", "Inventory.Presentation.dll"]

github_action_build_and_deploy.yml

name: Build and deploy

on:
  push:
    branches: [ "main" ]
  workflow_dispatch:

env:
  REGISTRY_URL: registry.hub.docker.com
  REGISTRY_ORG: company
  SERVICE_NAME: inventory-backoffice
  K8S_CLUSTER: stuff-k8s
  
jobs:
  build:
    runs-on: [self-hosted, build]
    steps:
      - uses: actions/checkout@v3
      
      - name: Login to docker registry
        uses: azure/docker-login@v1
        with:
          login-server: ${{ env.REGISTRY_URL }}
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build and push docker containers
        uses: docker/build-push-action@v3
        with:
          context: .
          file: Inventory.Presentation/Dockerfile
          push: true
          tags: |
            ${{ env.REGISTRY_URL }}/${{ env.REGISTRY_ORG }}/${{ env.SERVICE_NAME }}:latest
            ${{ env.REGISTRY_URL }}/${{ env.REGISTRY_ORG }}/${{ env.SERVICE_NAME }}:${{ github.sha }}

  deploy:
    runs-on: [self-hosted, build]
    needs: build
    steps:
      - uses: actions/checkout@v3
      - uses: azure/setup-kubectl@v3
        id: install_kubectl
      - name: Set k8s context
        uses: azure/k8s-set-context@v3
        with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Deploy
        uses: Azure/k8s-deploy@v4
        with:
          name: ${{ env.K8S_CLUSTER }}
          action: deploy
          strategy: basic
          manifests: |
            deployment/k8s/inventory-backoffice.yml
          images: |
            ${{ env.REGISTRY_ORG }}/${{ env.SERVICE_NAME }}:${{ github.sha }}

ingress-inventory.yml

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: inventory-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
    cert-manager.io/cluster-issuer: letsencrypt
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/proxy-buffer-size: "64k"
spec:
  rules:
    - host: inventory.domain.tld
      http:
        paths:
          - path: /
            pathType: ImplementationSpecific
            backend:
              service:
                name: inventory-webapp
                port:
                  number: 80
    - host: inventory.domain.tld
      http:
        paths:
          - path: /umbraco
            pathType: Prefix
            backend:
              service:
                name: inventory-backoffice
                port:
                  number: 80
    - host: inventory.domain.tld
      http:
        paths:
          - path: /umbraco-signin-oidc
            pathType: Prefix
            backend:
              service:
                name: inventory-backoffice
                port:
                  number: 80
    - host: inventory.domain.tld
      http:
        paths:
          - path: /App_Plugins
            pathType: Prefix
            backend:
              service:
                name: inventory-backoffice
                port:
                  number: 80
  tls:
    - hosts:
        - inventory.domain.tld
      secretName: inventory-webapp-ssl

inventory-backoffice.yml

apiVersion: v1
kind: Service
metadata:
  name: inventory-backoffice
spec:
  selector:
    app: inventory-backoffice
  ports:
    - port: 80
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: inventory-backoffice
  labels:
    app: inventory-backoffice
spec:
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 50%
  replicas: 1
  selector:
    matchLabels:
      app: inventory-backoffice
  template:
    metadata:
      labels:
        app: inventory-backoffice
    spec:
      containers:
        - name: inventory-backoffice
          image: company/inventory-backoffice:latest
          ports:
            - containerPort: 80
          env:
            - name: ASPNETCORE_ENVIRONMENT
              value: Production
            - name: ConnectionStrings__umbracoDbDSN
              valueFrom:
                secretKeyRef:
                  name: inventory-backoffice
                  key: CONNECTION_STRING
            - name: FrontEndUrl
              value: "https://inventory.domain.tld"
      restartPolicy: Always
      imagePullSecrets:
        - name: docker-registry