Add fornax.neuralplatform.ai to Cloudflare tunnel ingress rules

servers/legion/main.tf

@@ -94,6 +94,15 @@ resource "cloudflare_tunnel_config" "legion" {
     }
 
 
+    # fornax.neuralplatform.ai — Fornax torrent coordinator (qBittorrent API proxy)
+    ingress_rule {
+      hostname = "fornax.neuralplatform.ai"
+      service  = "https://traefik.kube-system.svc:443"
+      origin_request {
+        no_tls_verify = true
+      }
+    }
+
     # Catch-all — must be last
     ingress_rule {
       service = "http_status:404"