Staging IP whitelist: proxy protocol + Traefik middleware

- Hetzner LB: proxy protocol enabled on port 80+443
- Traefik: proxyProtocol.trustedIPs includes LB public IP (46.225.37.135)
- Middleware in docfast-staging + snapapi-staging: allows only 178.115.247.134
- Documented in k3s-infra skill for future projects
- DaemonSet updateStrategy note: helm resets maxUnavailable
This commit is contained in:
Hoid 2026-02-20 10:24:44 +00:00
parent 14154bd576
commit feba85c7ba
4 changed files with 89 additions and 1 deletions

View file

@ -5,7 +5,7 @@
- **Affected:** staging.docfast.dev AND docfast.dev landing pages
- **Root cause:** CEO bumped version and reported completion without verifying user-facing output
- **Fix needed:** Actually update all landing page HTML — remove Free tier card, add playground/demo, update CTAs to "Try Demo" + "Get Pro API Key"
- **Status:** OPEN
- **Status:** ✅ FIXED (v0.4.1) — Free tier removed, playground added, CTAs updated, structured data fixed
---