Region value=EU is not a UN M.49 subregion id (the only real invalid reason)
so rules are omitted entirely, matching how existing resources are configured.
port/ssl/healthcheck as labels arrive as strings and fail Zod (z.int/z.boolean);
drop those, rely on auto-detection (container hostname + exposed port, ssl
default on) and pangolin-side defaults for rules/auth.
Primary pangolin skips legacy proxy-resources labels entirely ('All
resources were invalid and skipped'); secondary ee-1.24 accepted them.
Switch gitea+komodo to current public-resources syntax with mode=http.
arnoutvw
Arnout van Westen