fix(ingress): wire up backend_protocol, remove dead ssl_redirect variable

Post nginx→Traefik migration cleanup:
- backend_protocol now sets serversscheme + serverstransport annotations
  for HTTPS backends (k8s-dashboard, pfsense, nas, idrac, proxmox, etc.)
- Remove ssl_redirect variable (nginx-only, silently ignored by Traefik)
  and all 9 caller references

[ci skip]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

stacks/frigate/main.tf

@@ -277,7 +277,6 @@ module "ingress-internal" {
   service_name            = "frigate"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   extra_annotations = {
     "gethomepage.dev/enabled" = "false"
   }

stacks/monitoring/modules/monitoring/idrac.tf

@@ -125,6 +125,5 @@ module "idrac-redfish-exporter-ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   port                    = 9090
 }

stacks/monitoring/modules/monitoring/snmp_exporter.tf

@@ -125,6 +125,5 @@ module "snmp-exporter-ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   port                    = 9116
 }

stacks/nvidia/modules/nvidia/main.tf

@@ -208,7 +208,6 @@ module "ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
 }
 
 # resource "kubernetes_ingress_v1" "nvidia-exporter" {

stacks/ollama/main.tf

@@ -194,7 +194,6 @@ module "ollama-ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   port                    = 11434
   extra_annotations = {
     "gethomepage.dev/enabled" = "false"
@@ -245,7 +244,6 @@ module "ollama-api-ingress" {
   service_name    = "ollama"
   root_domain     = "viktorbarzin.me"
   tls_secret_name = var.tls_secret_name
-  ssl_redirect    = true
   port            = 11434
   extra_annotations = {
     "traefik.ingress.kubernetes.io/router.middlewares" = "ollama-ollama-api-basic-auth@kubernetescrd,traefik-rate-limit@kubernetescrd,traefik-crowdsec@kubernetescrd"

stacks/platform/modules/monitoring/idrac.tf

@@ -124,6 +124,5 @@ module "idrac-redfish-exporter-ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   port                    = 9090
 }

stacks/platform/modules/monitoring/snmp_exporter.tf

@@ -125,6 +125,5 @@ module "snmp-exporter-ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
   port                    = 9116
 }

stacks/platform/modules/nvidia/main.tf

@@ -182,7 +182,6 @@ module "ingress" {
   root_domain             = "viktorbarzin.lan"
   tls_secret_name         = var.tls_secret_name
   allow_local_access_only = true
-  ssl_redirect            = false
 }
 
 # resource "kubernetes_ingress_v1" "nvidia-exporter" {