k.renner
ef08d34284
ENABLE_HTTP_REMOTE_USER + ENABLE_HTTP_REMOTE_USER_API makes the paperless.auth middleware log 'No authentication provided from private IP …' on every API request without the X-Authentik-Username header. The readinessProbe hitting /api/ every 10 s and the liveness probe every 30 s flooded the log; the actual gate-outpost-fronted traffic was lost in the noise. paperless-ngx has no unauthenticated health endpoint, so a TCP probe on the gunicorn port is the closest non-invasive equivalent. Trades HTTP-level health for log readability — acceptable since gunicorn binding the port is the same signal we previously got from /api/.