From 6da0a394281da14ca7976199a536843a107568ca Mon Sep 17 00:00:00 2001
From: Aleksandr Bogomiakov <git@hexor.cy>
Date: Mon, 12 Oct 2026 11:49:24 +0100
Subject: [PATCH] Preserve RustDesk client IP addresses during NAT detection

---
 k8s-ng/apps/rustdesk/service.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/k8s-ng/apps/rustdesk/service.yaml b/k8s-ng/apps/rustdesk/service.yaml
index 0b7190a..c31680f 100644
--- a/k8s-ng/apps/rustdesk/service.yaml
+++ b/k8s-ng/apps/rustdesk/service.yaml
@@ -1,3 +1,5 @@
+# Preserve client source IPs for RustDesk NAT detection. Public DNS points to music,
+# where both servers and their persistent data live.
 ---
 apiVersion: v1
 kind: Service
@@ -7,7 +9,7 @@ metadata:
     app: rustdesk-hbbs
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbs
   ports:
@@ -29,7 +31,7 @@ metadata:
     app: rustdesk-hbbs
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbs
   ports:
@@ -47,7 +49,7 @@ metadata:
     app: rustdesk-hbbr
 spec:
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
+  externalTrafficPolicy: Local
   selector:
     app: rustdesk-hbbr
   ports: