Give glitchtip-worker direct LAN access via ipvlan network

Replaces the ineffective proxy-network approach with an ipvlan interface
on the host's physical NIC (NETWORK_INTERFACE in .env), following the
same pattern as mdns-repeater.  Worker retains db/redis/mail connectivity
alongside the new lan interface.

Made-with: Cursor

Author: romkey

apps/glitchtip/.env.example

@@ -25,6 +25,10 @@ CELERY_WORKER_MAX_TASKS_PER_CHILD=10000
 # Set to True to allow new user registrations; disable once initial accounts exist
 ENABLE_USER_REGISTRATION=False
 
+# Host network interface for the worker's ipvlan LAN network (e.g. eth0, ens3)
+# Run 'ip link' on the host to find the right interface name.
+NETWORK_INTERFACE=eth0
+
 # Image versions
 #IMAGE_VERSION=latest
 #REDIS_IMAGE_VERSION=7-alpine

apps/glitchtip/docker-compose.yml

@@ -52,9 +52,9 @@ services:
       - .env
     networks:
       - db
-      - proxy
       - redis
       - mail
+      - lan
     depends_on:
       glitchtip-redis:
         condition: service_healthy
@@ -86,3 +86,11 @@ networks:
     name: postfix-net
   redis:
     name: glitchtip-redis-net
+  lan:
+    driver: ipvlan
+    driver_opts:
+      parent: "${NETWORK_INTERFACE}"
+#   ipam:
+#     config:
+#       - subnet: 192.168.1.0/24
+#         gateway: 192.168.1.1