keeping some ips here

infrastructure/traefik-system/configmap.yaml

@@ -7,15 +7,14 @@ data:
     [ping]
     
     [global]
-      checkNewVersion = true
+      checkNewVersion = false
+      # renovate does that
       sendAnonymousUsage = false
     
     [log]
       level = "INFO"
     
     [accessLog]
-      # format = "json"
-      # filePath = "/var/log/traefik/access.log"
       [accessLog.fields]
         defaultMode = "keep"
         [accessLog.fields.names]
@@ -49,8 +48,6 @@ data:
       [providers.kubernetesIngress]
         allowExternalNameServices = true
         ingressClass = "traefik"    
-        [providers.kubernetesIngress.ingressEndpoint]
-          hostname = "moll.re"
 
     [serversTransport]
       insecureSkipVerify = true
@@ -66,12 +63,19 @@ data:
 
       [entryPoints.websecure]
         address = ":8443"
+        [entryPoints.websecure.forwardedHeaders]
+          insecure = true
+          # forward ip headers no matter where they come from
+      
       [entryPoints.metrics]
         address = ":9100"
+      
       [entryPoints.traefik]
         address = ":9000"
-      [entryPoints.dnsovertls] # route dns over https to other pods but provide own certificate
+      
+      [entryPoints.dnsovertls]
         address = ":853"
+        # route dns over https to other pods but provide own certificate
 
     [metrics]
       [metrics.prometheus]