=== 엣지 nginx 가 X-Forwarded-For 를 세우나 ===
8:	listen 80 default_server;
9:	server_name _;
12:		proxy_pass http://k3s_traefik;
14:		proxy_set_header Host              $host;
15:		proxy_set_header X-Forwarded-Host  $host;
16:		proxy_set_header X-Forwarded-Proto http;
17:		proxy_set_header X-Forwarded-Port  80;
18:		proxy_set_header X-Forwarded-For   $remote_addr;
19:		proxy_set_header X-Real-IP         $remote_addr;

=== app1 은 엣지를 거치나 — 엣지 access log 마지막 3줄 ===
192.168.122.1 - - [17/Sep/2026:07:10:45 +0000] "GET /api/echo HTTP/1.1" 200 617 "-" "curl/8.5.0"
192.168.122.1 - - [17/Sep/2026:07:11:33 +0000] "GET /realms/master HTTP/1.1" 200 602 "-" "curl/8.5.0"
192.168.122.1 - - [17/Sep/2026:07:12:01 +0000] "GET /api/echo HTTP/1.1" 200 617 "-" "curl/8.5.0"

=== http 로 토큰 엔드포인트가 도나 (이게 되면 b·c 편은 TLS 없이 돈다) ===
well-known 200
token     401
