willemjan ef58a7c0ca fix: drop lan-only ipAllowList (klipper-lb SNATs all LB traffic to 10.42.0.1, so Traefik never sees real client IPs)
Internal-only for argocd/auth/adguard.labzand.com is now enforced at DNS level:
cloudflare-ddns only publishes ns.labzand.com; internal names resolve solely via
AdGuard rewrites. Delete the *.labzand.com A record in Cloudflare once.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <[email protected]>
2026-11-14 17:35:35 +01:00
2026-10-12 11:42:27 +02:00
2026-11-04 20:45:00 +01:00
2026-10-13 12:00:13 +02:00
2026-11-04 21:01:54 +01:00
2026-11-04 10:57:09 +01:00
2026-10-12 11:42:27 +02:00
S
Description
k3s cluster setup for homelab
Readme
452 KiB
Languages
Markdown 100%