Cloudflare's edge 308-redirects git smart-http info/refs requests when the record is proxied, breaking git/ArgoCD. DNS-only sends traffic straight to the router -> node -> Traefik, which terminates TLS with a valid LE cert. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>