blob: 783ea7b8c68298b64bd8f52953267dfa3367083f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
# Traefik Configuration
k3s HelmChartConfig to customize the bundled Traefik ingress controller.
## What This Does
Configures Traefik to trust `X-Forwarded-For` headers from trusted proxy networks (relayd on frontends).
This allows backend applications to see the real client IP address instead of internal cluster IPs.
## Apply
```bash
kubectl apply -f helmchartconfig.yaml
```
Traefik will automatically restart and pick up the new configuration.
## Trusted Networks
- `192.168.0.0/16` - WireGuard tunnel IPs (relayd frontends)
- `10.0.0.0/8` - Kubernetes pod/service network
- `172.16.0.0/12` - Docker bridge networks
|
