will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

route vpn.neuralplatform.ai tunnel directly to headscale, bypass traefik

Browse Source
This commit is contained in:
Will Anderson
2026-04-22 01:38:28 -05:00
parent 075a25fb10
commit 3234d9cee6
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/main.tf
+3 -4
View File
@@ -172,12 +172,11 @@ resource "cloudflare_zero_trust_tunnel_cloudflared_config" "legion" {
} }
# vpn.neuralplatform.ai — Headscale coordination server (Tailscale control plane) # vpn.neuralplatform.ai — Headscale coordination server (Tailscale control plane)
# Route directly to Headscale — bypasses Traefik which strips the Upgrade: ts2021 header
# Cloudflare handles TLS termination; internal connection is plain HTTP
ingress_rule { ingress_rule {
hostname = "vpn.neuralplatform.ai" hostname = "vpn.neuralplatform.ai"
service = "https://traefik.kube-system.svc:443" service = "http://headscale.headscale.svc.cluster.local:8080"
origin_request {
no_tls_verify = true
}
} }
# Catch-all — must be last # Catch-all — must be last