k.rennerandClaude Opus 4.7
2d41d6a268
Three HA hostnames (home, home.k, vscode.home) flip to traefik. The proxy sidecar in the HA pod stays the XFF trust anchor on the same :8124/:8080 ports; the home-assistant-ns CNP already allowed traefik on those ports (added during the shelly-manager batch). Raises the websecure entrypoint read/write/idle timeouts to 3600s globally to match the nginx proxy-read/send-timeout that HA dashboards, vscode (code-server), woodpecker live log streams, and the pve noVNC console rely on. Traefik's 180s default cuts long-lived idle WS. cloudflared retargets home.renner.uno to the traefik Service; the .k. and vscode.home. names are LAN-only via external-dns-unifi. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>