willemjan
ef58a7c0ca
Internal-only for argocd/auth/adguard.labzand.com is now enforced at DNS level: cloudflare-ddns only publishes ns.labzand.com; internal names resolve solely via AdGuard rewrites. Delete the *.labzand.com A record in Cloudflare once. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>
14 lines
457 B
YAML
14 lines
457 B
YAML
# Middleware voor argocd.labzand.com: http (web) -> https redirect.
|
|
# (lan-only ipAllowList verwijderd: k3s klipper-lb SNAT't al LB-verkeer naar
|
|
# 10.42.0.1, waardoor Traefik nooit het echte client-IP ziet. Internal-only
|
|
# wordt afgedwongen via DNS: geen publiek A-record voor interne namen.)
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: redirect-https
|
|
namespace: argocd
|
|
spec:
|
|
redirectScheme:
|
|
scheme: https
|
|
permanent: true
|