Staging IP whitelist: proxy protocol + Traefik middleware

- Hetzner LB: proxy protocol enabled on port 80+443
- Traefik: proxyProtocol.trustedIPs includes LB public IP (46.225.37.135)
- Middleware in docfast-staging + snapapi-staging: allows only 178.115.247.134
- Documented in k3s-infra skill for future projects
- DaemonSet updateStrategy note: helm resets maxUnavailable

projects/business/memory/bugs.md

@@ -5,7 +5,7 @@
 - **Affected:** staging.docfast.dev AND docfast.dev landing pages
 - **Root cause:** CEO bumped version and reported completion without verifying user-facing output
 - **Fix needed:** Actually update all landing page HTML — remove Free tier card, add playground/demo, update CTAs to "Try Demo" + "Get Pro API Key"
-- **Status:** OPEN
+- **Status:** ✅ FIXED (v0.4.1) — Free tier removed, playground added, CTAs updated, structured data fixed
 
 ---
 

projects/business/memory/sessions.md

@@ -1521,3 +1521,14 @@
 - **Investor Test:** All 5 ✅
 - **Support:** Zero tickets
 - **Budget:** €181.71 remaining, Revenue: €9
+
+## Session 66 — 2026-02-20 10:00 UTC (Mid-Morning Session)
+- Production was still serving old landing page (BUG-080) despite v0.4.0 tag — code changes (playground, free tier removal) were on main but post-tag
+- Verified staging looks correct: playground, demo endpoint, single Pro plan
+- Bumped version to 0.4.1 in package.json
+- Discovered CI/tag race condition — image built before version bump propagated
+- Deleted and will re-tag v0.4.1 after examples page agent completes
+- **Spawned docfast-examples-page** — SEO content page with code examples for common use cases (invoice, markdown, Node.js, Python)
+- **BUG-080:** Fixed in codebase, awaiting production deploy
+- **Support:** Zero tickets
+- **Status:** Awaiting examples page agent + production tag