From 5239ffae5e0dc2eae668bbb0aa73051547e7c23a Mon Sep 17 00:00:00 2001
From: Hermes <hermes@hermes.local>
Date: Sat, 16 May 2026 23:09:45 +0000
Subject: [PATCH] fix: gluetun service URLs in traefik config (route via
 gluetun:port)

---
 infrastructure.org | 32 ++++++++++++++++----------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/infrastructure.org b/infrastructure.org
index 8eda4e9..1fe0fe6 100644
--- a/infrastructure.org
+++ b/infrastructure.org
@@ -628,51 +628,51 @@ http:
     jellyfin-internal:
       loadBalancer:
         servers:
-          - url: http://jellyfin:8096
+          - url: http://gluetun:8096
     jellyseerr-internal:
       loadBalancer:
         servers:
-          - url: http://jellyseerr:5055
+          - url: http://gluetun:5055
     radarr-internal:
       loadBalancer:
         servers:
-          - url: http://radarr:7878
+          - url: http://gluetun:7878
     sonarr-internal:
       loadBalancer:
         servers:
-          - url: http://sonarr:8989
+          - url: http://gluetun:8989
     lidarr-internal:
       loadBalancer:
         servers:
-          - url: http://lidarr:8686
+          - url: http://gluetun:8686
     prowlarr-internal:
       loadBalancer:
         servers:
-          - url: http://prowlarr:9696
+          - url: http://gluetun:9696
     whisparr-internal:
       loadBalancer:
         servers:
-          - url: http://whisparr:6969
+          - url: http://gluetun:6969
     mylar-internal:
       loadBalancer:
         servers:
-          - url: http://mylar:8090
+          - url: http://gluetun:8090
     lazylibrarian-internal:
       loadBalancer:
         servers:
-          - url: http://lazylibrarian:5299
+          - url: http://gluetun:5299
     sabnzbd-internal:
       loadBalancer:
         servers:
-          - url: http://sabnzbd:8080
+          - url: http://gluetun:8080
     qbittorrent-internal:
       loadBalancer:
         servers:
-          - url: http://qbittorrent:8200
+          - url: http://gluetun:8200
     flaresolverr-internal:
       loadBalancer:
         servers:
-          - url: http://flaresolverr:8191
+          - url: http://gluetun:8191
     homepage-internal:
       loadBalancer:
         servers:
@@ -724,7 +724,7 @@ http:
     audiobookshelf-internal:
       loadBalancer:
         servers:
-          - url: http://audiobookshelf:13378
+          - url: http://gluetun:80    # audiobookshelf on port 80 inside gluetun
     guacamole-internal:
       loadBalancer:
         servers:
@@ -740,9 +740,9 @@ http:
 #+END_SRC
 
 All 28 routers follow the same pattern. The service URLs point to Docker DNS
-names on the =networking= bridge. Services behind Gluetun VPN use their
-internal container port (the port inside Gluetun's network namespace), not
-the host-exposed port.
+names on the =networking= bridge. Services behind Gluetun VPN aren't on
+the bridge network — they use =network_mode: service:gluetun= and are
+reached via =http://gluetun:<port>= instead of =http://servicename:<port>=.
 
 ** Internal Routers — No Auth (internal :8083)