flux(dev): set GATEWAY_VIP to Proxmox Gateway VIP 192.168.1.53 (split-horizon DNS)

Co-Authored-By: Claude Opus 4.8 <[email protected]>

clusters/dev/kustomization.yaml

@@ -65,6 +65,12 @@ patches:
       - op: replace
         path: /data/ACME_CLUSTER_ISSUER
         value: "letsencrypt-prod"
+      # Split-horizon DNS target: the Cilium-L2 VIP of the `shared` Gateway on the Proxmox LAN
+      # (base default 10.73.0.240 was the old libvirt VIP). coredns-custom answers
+      # *.home.keithjackson.dev with this so in-cluster OIDC clients reach Keycloak via the Gateway.
+      - op: replace
+        path: /data/GATEWAY_VIP
+        value: "192.168.1.53"
       # dev mirrors prod's 3-node topology, so the replicated tier keeps 3 replicas.
       - op: replace
         path: /data/LONGHORN_DEFAULT_REPLICA_COUNT