feat: n8n httproute via homelab-gateway + fix trust proxy

clusters/homelab/apps/n8n/helmrelease.yaml

@@ -35,6 +35,8 @@ spec:
           value: "true"
         N8N_COMMUNITY_PACKAGES_ALLOW_TOOL_USAGE:
           value: "true"
+        N8N_PROXY_HOPS:
+          value: "1"
       deploymentStrategy:
         type: "Recreate"
       persistence:

clusters/homelab/apps/n8n/httproute.yaml

@@ -0,0 +1,15 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: n8n
+  namespace: n8n
+spec:
+  parentRefs:
+    - name: homelab-gateway
+      namespace: gateway
+  hostnames:
+    - "n8n.net-scope.org"
+  rules:
+    - backendRefs:
+        - name: n8n
+          port: 80

clusters/homelab/apps/n8n/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace.yaml
-  - secret.sops.yaml
   - helmrepository.yaml
   - helmrelease.yaml
+  - secret.sops.yaml
+  - httproute.yaml

clusters/homelab/apps/n8n/secret.sops.yaml

@@ -4,7 +4,7 @@ metadata:
     name: n8n-secret
     namespace: n8n
 stringData:
-    N8N_ENCRYPTION_KEY: ENC[AES256_GCM,data:cNYN+QtUshY=,iv:P2R0KNUNg8S4o/nArJ5B5YPMyWDvrvvcnweIS+elZbw=,tag:+ggHzGRclLc85UsUNvrl4g==,type:str]
+    N8N_ENCRYPTION_KEY: ENC[AES256_GCM,data:18FHRTGUDfw=,iv:FY64fk137UOrIj1IUWvUA5cIVxDbkGIblfCPJkoCBEA=,tag:kz3CQ7J17d0dDTsBgak40Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAraFRTZUkzdGtLNkhKcXM1
-            NzdPTEFUektZaVEya1ZwQ2JqUXFsQSs4dUVRCndvWktmb2xJT1JWNWhHbnhHSFdy
-            NWdPb3J6YlpUdmVOQTJmVHhjcGJzMUkKLS0tIGRaV0hTUk9yNjhsSlI3MnRQVTk2
-            VHBNbUtveVpLTnNTUlVhWHFIRzN4ZkUKtoSLjgKtSwSzSl+PvIHAd8KRqPPI7clG
-            WGFSrlrsn3R7lnNqB60PDx01eE04rCxmAvyIWwEyZ9x95Bx1e9ZzMA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvc1Y1aTY1bS82WWJGYnFm
+            eHhFNXlDUi9uMzNDOWJ5R2Z5b1JEcUxvMlJJCi8waGM5ZitUVTdtY1pxRkRSelZi
+            T2NZSnR4cXBjNDJoYkhycTAva1JmVzQKLS0tIGw2U2xYbWIzcGhGYkpGSmVWbC8y
+            aDJBUUp0V1BtSEFFME9pOGh2ZEEyazQKDgHl4zfBiSKD/UrDoVxV4mmkpTydeuBl
+            obpjmhEQCS4lDoDampQpZwzjIHXu83Bv7DV5kO+dhLaRowlBNsnM8A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:c2wh9Qk5tC3Gd8/+0fzSLXZU9uPUOVz4cMOgpVCVskEK+05fdRHsH0C1pAM5GnWxAnX+cKYUhTGNRWA2bp7MjUmFIhqZHh3KVa4taErg/hinNsfZgO8Tl3eTv5QaA+Pnehryk3jY3hpiqU1FT1QfYNfWH/XTKjobkXLbFuDmPM0=,iv:U/NkN96/qqhORNWap8JE1pedPNyoM/MtczI+j/7dShI=,tag:dJE9xCc0j5ThWLq0Q2QdLQ==,type:str]
+    lastmodified: "2026-05-09T11:55:38Z"
+    mac: ENC[AES256_GCM,data:ty+ANXT3Za1hHr77AOqkEBGf3P0D+YQSyly7svUA2IsJnZ3kDHnnu3b20E5AxyEkt+dv8IRVb9sMhgqTjNSULremmI2y55Rg6Z1zUjllprtXfQWQ7I9ZyW2Bt7sZaPfOjf1UFxY51h5fxaVvMEhai23+sfuVhKWqJVseOUq7r58=,iv:XUxRaiX7PzwvxaHqwWmROCBOBfEM56mIzY4oG4cQUaE=,tag:rodWRT5F4vlnLRgHlxrXqQ==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.4