From be5270e7a9e26442aa046366fdf51995f7481dc4 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Sat, 26 Sep 2026 17:45:40 +1000
Subject: [PATCH] drop proxmox routing

---
 apps/base/haproxy/configmap.yaml | 33 --------------------------------
 1 file changed, 33 deletions(-)

diff --git a/apps/base/haproxy/configmap.yaml b/apps/base/haproxy/configmap.yaml
index 14f9ee7..d81ac50 100644
--- a/apps/base/haproxy/configmap.yaml
+++ b/apps/base/haproxy/configmap.yaml
@@ -12,8 +12,6 @@ data:
     /etc/haproxy/certs/ceph-unkin-net/tls.crt
 
   fe_http.map: |
-    au-syd1-pve.main.unkin.net be_ausyd1pve_web
-    au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
     sonarr.main.unkin.net be_sonarr
     radarr.main.unkin.net be_radarr
     lidarr.main.unkin.net be_lidarr
@@ -31,8 +29,6 @@ data:
     auth.unkin.net be_k8s_kanidm
 
   fe_https.map: |
-    au-syd1-pve.main.unkin.net be_ausyd1pve_web
-    au-syd1-pve-api.main.unkin.net be_ausyd1pve_api
     sonarr.main.unkin.net be_sonarr
     radarr.main.unkin.net be_radarr
     lidarr.main.unkin.net be_lidarr
@@ -98,7 +94,6 @@ data:
       mode http
       description Global HTTPS Frontend
       acl acl-letsencrypt path_beg /.well-known/acme-challenge/
-      acl acl_ausyd1pve req.hdr(host) -i au-syd1-pve.main.unkin.net
       acl acl_sonarr req.hdr(host) -i sonarr.main.unkin.net
       acl acl_radarr req.hdr(host) -i radarr.main.unkin.net
       acl acl_lidarr req.hdr(host) -i lidarr.main.unkin.net
@@ -114,11 +109,8 @@ data:
       acl acl_stalwart_webadmin req.hdr(host) -i autoconfig.main.unkin.net
       acl acl_stalwart_webadmin req.hdr(host) -i autodiscovery.main.unkin.net
       acl acl_kanidm req.hdr(host) -i auth.unkin.net
-      acl acl_internalsubnets src 198.18.0.0/16 10.10.12.0/24
       http-request set-header X-Forwarded-Proto https
       http-request set-header X-Real-IP %[src]
-      http-request deny if { hdr_dom(host) -i au-syd1-pve.main.unkin.net } !acl_internalsubnets
-      http-response set-header X-Frame-Options DENY if acl_ausyd1pve
       http-response set-header X-Frame-Options DENY if acl_sonarr
       http-response set-header X-Frame-Options DENY if acl_radarr
       http-response set-header X-Frame-Options DENY if acl_lidarr
@@ -185,31 +177,6 @@ data:
       tcp-request inspect-delay 5s
       tcp-request content accept if { req_len 0 }
 
-    backend be_ausyd1pve_api
-      description Backend for au-syd1 pve cluster (API only)
-      balance roundrobin
-      http-request set-header X-Forwarded-Port %[dst_port]
-      http-request add-header X-Forwarded-Proto https if { dst_port 443 }
-      http-reuse always
-      option httpchk GET /
-      option forwardfor
-      option http-keep-alive
-      option prefer-last-server
-      redirect scheme https if !{ ssl_fc }
-
-    backend be_ausyd1pve_web
-      description Backend for au-syd1 pve cluster (Web)
-      balance roundrobin
-      cookie SRVNAME insert indirect nocache
-      http-request set-header X-Forwarded-Port %[dst_port]
-      http-request add-header X-Forwarded-Proto https if { dst_port 443 }
-      http-reuse always
-      option httpchk GET /
-      option forwardfor
-      option http-keep-alive
-      option prefer-last-server
-      redirect scheme https if !{ ssl_fc }
-
     backend be_ceph_dashboard
       description Backend for Ceph Dashboard from Mgr instances
       balance roundrobin