Viktor Barzin 0c01adac95 traefik: dedicate LB IP 10.0.20.203 + externalTrafficPolicy=Local ... Gives direct (non-proxied) apps real client IPs for CrowdSec (were SNAT'd to the node IP under ETP=Cluster) and working QUIC. Companion change (NOT in TF — remote cloudflared tunnel config, done via CF API): tunnel ingress repointed from https://10.0.20.200:443 to https://traefik.traefik.svc.cluster.local:443 so proxied apps are decoupled from the LB IP. pfSense 443 NAT -> traefik_lb alias (.203). See docs/plans/2026-05-30-traefik-dedicated-ip-etp-local-*. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-30 08:09:37 +00:00
..
traefik	traefik: dedicate LB IP 10.0.20.203 + externalTrafficPolicy=Local	2026-05-30 08:09:37 +00:00