security: change storefront from NodePort to ClusterIP (routed through Traefik)

2026-08-05 11:32:06 +00:00
parent 4d3bf5038e
commit 8076f89dfb
1 changed files with 1 additions and 5 deletions
@@ -4,13 +4,9 @@ metadata:
  name: storefront
  namespace: manoonoils
 spec:
-  # Use NodePort with externalTrafficPolicy: Local to preserve client source IP
+  type: ClusterIP
  # This is required for proper client IP detection in analytics (Rybbit, etc.)
  type: NodePort
  externalTrafficPolicy: Local
  selector:
    app: storefront
  ports:
  - port: 3000
    targetPort: 3000
    # Let Kubernetes assign a NodePort automatically