Cloudflare's edge 308-redirects git smart-http info/refs requests when the
record is proxied, breaking git/ArgoCD. DNS-only sends traffic straight to
the router -> node -> Traefik, which terminates TLS with a valid LE cert.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
Internal-only for argocd/auth/adguard.labzand.com is now enforced at DNS level:
cloudflare-ddns only publishes ns.labzand.com; internal names resolve solely via
AdGuard rewrites. Delete the *.labzand.com A record in Cloudflare once.
Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
willemjan