Viktor Barzin 0c01adac95 traefik: dedicate LB IP 10.0.20.203 + externalTrafficPolicy=Local ... Gives direct (non-proxied) apps real client IPs for CrowdSec (were SNAT'd to the node IP under ETP=Cluster) and working QUIC. Companion change (NOT in TF — remote cloudflared tunnel config, done via CF API): tunnel ingress repointed from https://10.0.20.200:443 to https://traefik.traefik.svc.cluster.local:443 so proxied apps are decoupled from the LB IP. pfSense 443 NAT -> traefik_lb alias (.203). See docs/plans/2026-05-30-traefik-dedicated-ip-etp-local-*. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-30 08:09:37 +00:00
..
modules/traefik	traefik: dedicate LB IP 10.0.20.203 + externalTrafficPolicy=Local	2026-05-30 08:09:37 +00:00
main.tf	x402: flip gateway live with Viktor's wallet + Slack payment notifications	2026-05-10 18:21:37 +00:00
secrets	extract remaining 19 modules from platform, complete stack split [ci skip]	2026-03-17 21:42:16 +00:00
terragrunt.hcl	extract remaining 19 modules from platform, complete stack split [ci skip]	2026-03-17 21:42:16 +00:00