Demo images / Build & push demo images (push) Successful in 2m39s
The unit's ExecStartPre baked the first hostname -I token into host-ip.env, which config.rs prefers over its own detection — once a VPN/bridge interface existed (netbird's wg tunnel), every host_ip consumer (install configs, VPN, mint URLs) got the tunnel IP. Read the main-table default route's src address instead, falling back to hostname -I on routeless hosts. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>