Service+Endpoints pattern proxying to 10.0.10.10:3210 (Foolery). Protected by Authentik forward-auth. DNS via Cloudflare tunnel.