diff --git a/k8s-ng/apps/rustdesk/service.yaml b/k8s-ng/apps/rustdesk/service.yaml
index 0b7190a..c31680f 100644
--- a/k8s-ng/apps/rustdesk/service.yaml
+++ b/k8s-ng/apps/rustdesk/service.yaml
@@ -1,3 +1,5 @@
+# Preserve client source IPs for RustDesk NAT detection. Public DNS points to music,
+# where both servers and their persistent data live.
 ---
 apiVersion: v1
 kind: Service
@@ -7,7 +9,7 @@ metadata:
     app: rustdesk-hbbs
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbs
   ports:
@@ -29,7 +31,7 @@ metadata:
     app: rustdesk-hbbs
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbs
   ports:
@@ -47,7 +49,7 @@ metadata:
     app: rustdesk-hbbr
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbr
   ports: