- Traefik is a first-class ingress controller choice: per-instance Middleware
caps uploads at 50 MiB, nginx keeps its proxy-* annotations; picked in setup
- Let's Encrypt is optional: off skips the ClusterIssuer and gives each instance
a 10-year self-signed certificate instead of a Let's Encrypt one
- New port_bind setting: lan (default, LAN IP only), all (LAN + localhost),
local (localhost only)
- Hostname slots are keyed by the digit in the name (supa4 -> slot 4), so the
instance number, ports and hostname stay in step on every machine
- The log-retention job installs dblink and its helper into the extensions
schema instead of public: in public they break the app's
REVOKE ALL ON ALL ROUTINES IN SCHEMA public for the non-superuser postgres
role (42501 permission denied for function dblink_connect_u)
Igor K.
d4fedd718f