From 02e320db68d0835c887d3fff50e267039ee8745d Mon Sep 17 00:00:00 2001 From: Konstantin Renner Date: Fri, 24 Apr 2026 21:27:07 +0200 Subject: [PATCH] fix(coder): keep coder.renner.uno off the public internet Replace the external-dns cloudflare-proxied annotation (inherited from other apps' pattern) with `exclude: true` so external-dns doesn't publish a public Cloudflare record for coder.renner.uno. Coder is for internal developer use only. Co-Authored-By: Claude Opus 4.7 (1M context) --- kubernetes/apps/coder/helmrelease.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/coder/helmrelease.yaml b/kubernetes/apps/coder/helmrelease.yaml index 2d428816..b1a01a13 100644 --- a/kubernetes/apps/coder/helmrelease.yaml +++ b/kubernetes/apps/coder/helmrelease.yaml @@ -39,7 +39,9 @@ spec: host: coder.renner.uno annotations: cert-manager.io/cluster-issuer: letsencrypt-staging - external-dns.alpha.kubernetes.io/cloudflare-proxied: "true" + # Coder is intentionally LAN-only — opt the Ingress out of + # external-dns so no public Cloudflare record is created. + external-dns.alpha.kubernetes.io/exclude: "true" tls: enable: true secretName: coder-tls -- 2.54.0