=== 엣지 nginx 는 무엇을 설정하나 ===
		proxy_set_header X-Forwarded-Host  $host;
		proxy_set_header X-Forwarded-Proto http;
		proxy_set_header X-Forwarded-Port  80;
		proxy_set_header X-Forwarded-For   $remote_addr;
		proxy_set_header X-Real-IP         $remote_addr;

=== 그런데 앱에 도착하는 것 ===
"x-forwarded-host" : [ "app1.hyeonworks.com" ]
"x-forwarded-port" : [ "80" ]
"x-forwarded-proto" : [ "http" ]
"x-forwarded-server" : [ "traefik-59b7647586-t8fc7" ]
"x-real-ip" : [ "10.42.1.0" ]

=== 내 주소는 무엇인가 ===
    inet 100.83.212.4/32 scope global tailscale0

=== Traefik 이 신뢰하는 출발지 설정이 있나 ===
(위가 비면 기본값)

=== 저장소에 그 설정 파일이 있다 — 적용돼 있나 ===
# Make Traefik trust the X-Forwarded-* headers that the host nginx sets.
#
# Without this, Traefik rewrites every forwarded header from its own connection,
# which is plain HTTP on port 80. The application then sees scheme=http even
# though the browser connected over TLS. See docs/two-hop-proxy-header-contract.md.
#
# k3s installs Traefik through its bundled HelmChart, so values are overridden
# with a HelmChartConfig rather than by editing the deployment. k3s reconciles
# the chart and recreates the Traefik pod.
#
#   kubectl apply -f deploy/lab/k8s/traefik-forwarded-headers.yaml
#   kubectl -n kube-system rollout status deploy/traefik --timeout=180s
apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    ports:
