- accessLog: field filtering to drop sensitive headers (Authorization)
while keeping useful ones (User-Agent, Content-Type, Referer)
- metrics: Prometheus endpoint with latency buckets (0.1, 0.3, 1.2, 5.0s)
Aligned with core's observability config.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
All HTTP traffic now redirects to HTTPS at the entrypoint level,
eliminating the need for per-service redirect middleware.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add uplink.yml: Routes nitter, invidious, searx, freshrss, rsshub, radio
through ubuntu-prod to docker-public backend
- Add sequela.yml: Routes wiki and matomo through ubuntu-prod to docker-public
- Update traefik.yml: Add proxyProtocol insecure:true for VPS HAProxy
send-proxy compatibility
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
