ipAllowList middleware (192.168.0.0/16) on the websecure routers blocks
external access; separate IngressRoute on web 301-redirects http->https.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
Internal-only hostnames (argocd.labzand.com, auth.labzand.com) via AdGuard
wildcard rewrite; certs still valid via DNS-01 so no browser warnings.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>