192.168.1.x LAN clients couldn't reach non-proxied *.viktorbarzin.me domains because the TP-Link router doesn't support hairpin NAT. Adds a CronJob that configures Technitium's Split Horizon AddressTranslation post-processor on all 3 instances to translate 176.12.22.76 (public IP) → 10.0.20.200 (Traefik LB) in DNS responses for 192.168.1.0/24 clients. Also adds viktorbarzin.me to the DNS Rebinding Protection privateDomains allowlist so the translated private IP isn't stripped. [ci skip] Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| modules/technitium | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||
| tiers.tf | ||