From c36f269406576b7b39f5083c3d04b86b0b3532f9 Mon Sep 17 00:00:00 2001
From: Ruakij <ruakij@ruekov.eu>
Date: Sat, 24 Oct 2026 16:04:06 +0000
Subject: [PATCH] journal_upload: a node leaves its own NetBird address out of
 /etc/hosts, Traefik sees it as the cilium_host address

---
 journal_upload/tasks/main.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/journal_upload/tasks/main.yml b/journal_upload/tasks/main.yml
index 54fceff..89604c5 100644
--- a/journal_upload/tasks/main.yml
+++ b/journal_upload/tasks/main.yml
@@ -16,12 +16,14 @@
     install_recommends: false
     state: present
 
+# A node reaching its own address arrives at Traefik from its cilium_host address, which the
+# NetBird allowlist rejects; it takes the other nodes.
 - name: Pin the ingest name to the NetBird addresses
   ansible.builtin.blockinfile:
     path: /etc/hosts
     marker: "# {mark} journal_upload"
     block: |
-      {% for address in journal_upload.addresses %}
+      {% for address in journal_upload.addresses | reject('in', ansible_facts.all_ipv4_addresses) %}
       {{ address }} {{ journal_upload.host }}
       {% endfor %}
   notify: Restart systemd-journal-upload