From 823a35bb9a0e94e6b89b8490ddd9aba95e0c71cd Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Tue, 3 Mar 2026 11:17:48 -0800
Subject: [PATCH] Add changelog fragment for ringtail firewall fix

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 docs/changelog.d/main.bugfix.md | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 docs/changelog.d/main.bugfix.md

diff --git a/docs/changelog.d/main.bugfix.md b/docs/changelog.d/main.bugfix.md
new file mode 100644
index 0000000..43b9286
--- /dev/null
+++ b/docs/changelog.d/main.bugfix.md
@@ -0,0 +1 @@
+Trust k3s CNI interfaces (cni0, flannel.1) in ringtail NixOS firewall, fixing pod-to-host networking that broke all ringtail Tailscale Ingress services (authentik, frigate, ntfy, ollama).