Sync GX10 Traefik VIP and Intranet route

apps-gx10/fc-apple-mdm/README.md

@@ -50,7 +50,7 @@ IAmWorkin ACME CA; Smallstep SCEP requires an RSA intermediate/decrypter path.
    1Password operator for this workload.
 2. Import `localhost/fc-apple-mdm-nanohub:v0.2.0-20260617` into GX10 containerd
    before ArgoCD syncs. The deployment uses `imagePullPolicy: Never`.
-3. Ensure `mdm.iamworkin.lan` resolves to the GX10 Traefik VIP `10.0.57.202`
+3. Ensure `mdm.iamworkin.lan` resolves to the GX10 Traefik VIP `10.0.56.200`
    before cert-manager requests `Certificate/fc-apple-mdm-tls`.
 4. Prove `https://mdm.iamworkin.lan/version` after ArgoCD converges.
 5. Prove SCEP CA publication with

apps-gx10/fc-apple-mdm/fc-apple-mdm.yaml

@@ -235,7 +235,7 @@ metadata:
   name: fc-apple-mdm-tls
   namespace: fc-apple-mdm
   annotations:
-    flowercore.io/dns-preflight: "mdm.iamworkin.lan must resolve to 10.0.57.202 before ACME sync"
+    flowercore.io/dns-preflight: "mdm.iamworkin.lan must resolve to 10.0.56.200 before ACME sync"
 spec:
   secretName: fc-apple-mdm-tls
   issuerRef:

apps-gx10/intranet/ingressroute-intranet-web.json

@@ -22,8 +22,6 @@
         ]
       }
     ],
-    "tls": {
-      "secretName": "intranet-tls"
-    }
-  }
-}
+    "tls": {}
+  }
+}