Updated for new version

defaults/main.yml

@@ -21,6 +21,9 @@ wikideck_image_pull_secrets: []
 wikideck_peers: []
 # Test/private networks only; permits private addresses AND HTTP in the app.
 wikideck_allow_private_peers: false
+# Explicit mainnet candidate startup gates. Never set these before launch approval.
+wikideck_mainnet_launch: ""
+wikideck_mainnet_risk_ack: ""
 # Exact browser origin, without a trailing slash. Required when using ingress.
 wikideck_public_origin: ""
 wikideck_ingress_enabled: false
@@ -48,6 +51,10 @@ wikideck_resources:
 wikideck_node_selector: {}
 wikideck_tolerations: []
 wikideck_affinity: {}
+# Trust only literal proxy source IPs/CIDRs whose edge overwrites forwarded headers.
+wikideck_trusted_proxies: []
+# Optional private operations listener; application binds it to container loopback.
+wikideck_ops_port: ""
 
 # Requires a NetworkPolicy-capable CNI. Same-namespace clients only by default.
 wikideck_network_policy_enabled: true