7c8a5327e8fea9c915a3e7fbfa914764eac5a29d
Django raised DisallowedHost for kubelet probe requests (pod IP as Host header), making the probe fail and the pod crashloop. Paperless is behind ingress-nginx, which terminates the external Host header and forwards to the pod by IP — so Django ALLOWED_HOSTS adds no security. CSRF_TRUSTED_ORIGINS stays scoped to the ingress hostnames. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Description
No description provided
38 MiB