fix: claude mess

traefik/compose.yml

@@ -6,7 +6,7 @@ services:
       - "--api=true"
       - "--api.dashboard=true"
       - "--ping=true"
-      - "--log.level=INFO"
+      - "--log.level=DEBUG"
       - "--accesslog=true"
       - "--global.sendAnonymousUsage=false"
       - "--global.checkNewVersion=true"
@@ -21,14 +21,6 @@ services:
       - "--entrypoints.web.http.redirections.entryPoint.scheme=https"
       - "--entrypoints.web.http.redirections.entryPoint.permanent=true"
       - "--entrypoints.web-secure.http.middlewares=security-headers@file,fail2ban@file"
-      # Not published to the host - reachable only container-to-container on
-      # falcon_network. Lets other stacks (e.g. pulsenode) read the API
-      # directly without going through the public hostname, where a hairpin
-      # NAT round-trip through the host's published port rewrites the source
-      # IP and defeats vpn-only's IP allowlist.
-      - "--entrypoints.internal.address=:8080"
-      - "--ping.entrypoint=web-secure"
-      - "--certificatesresolvers.resolver.acme.tlschallenge=true"
       - "--certificatesresolvers.resolver.acme.email=${ACME_EMAIL}"
       - "--certificatesresolvers.resolver.acme.storage=/letsencrypt/acme.json"
       - "--experimental.plugins.fail2ban.moduleName=github.com/tomMoulard/fail2ban"