From dccbd22020cdb9974ff747d00bb47ae2e3cfb12b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Mon, 17 Aug 2026 17:49:42 +0000
Subject: [PATCH] fix: claude mess

---
 traefik/compose.yml | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/traefik/compose.yml b/traefik/compose.yml
index dcae35b..010667d 100644
--- a/traefik/compose.yml
+++ b/traefik/compose.yml
@@ -6,7 +6,7 @@ services:
       - "--api=true"
       - "--api.dashboard=true"
       - "--ping=true"
-      - "--log.level=INFO"
+      - "--log.level=DEBUG"
       - "--accesslog=true"
       - "--global.sendAnonymousUsage=false"
       - "--global.checkNewVersion=true"
@@ -21,14 +21,6 @@ services:
       - "--entrypoints.web.http.redirections.entryPoint.scheme=https"
       - "--entrypoints.web.http.redirections.entryPoint.permanent=true"
       - "--entrypoints.web-secure.http.middlewares=security-headers@file,fail2ban@file"
-      # Not published to the host - reachable only container-to-container on
-      # falcon_network. Lets other stacks (e.g. pulsenode) read the API
-      # directly without going through the public hostname, where a hairpin
-      # NAT round-trip through the host's published port rewrites the source
-      # IP and defeats vpn-only's IP allowlist.
-      - "--entrypoints.internal.address=:8080"
-      - "--ping.entrypoint=web-secure"
-      - "--certificatesresolvers.resolver.acme.tlschallenge=true"
       - "--certificatesresolvers.resolver.acme.email=${ACME_EMAIL}"
       - "--certificatesresolvers.resolver.acme.storage=/letsencrypt/acme.json"
       - "--experimental.plugins.fail2ban.moduleName=github.com/tomMoulard/fail2ban"