From 54fac027836f1e6bafc8937899adf710887b44e2 Mon Sep 17 00:00:00 2001
From: pi <pi@local>
Date: Sun, 25 Oct 2026 18:04:53 -0700
Subject: [PATCH] fix(cloudflared): pin tunnel protocol to http2

QUIC loses long-lived SSE streams when Chinese ISP gateways throttle UDP.
http2 over TCP is the deliberate fallback already in use.
---
 k8s/apps/cloudflared/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/k8s/apps/cloudflared/deployment.yaml b/k8s/apps/cloudflared/deployment.yaml
index 7404e72..178f801 100644
--- a/k8s/apps/cloudflared/deployment.yaml
+++ b/k8s/apps/cloudflared/deployment.yaml
@@ -20,6 +20,8 @@ spec:
             - tunnel
             - --no-autoupdate
             - run
+            - --protocol
+            - http2
             - --token
             - $(TUNNEL_TOKEN)
           env: