A Traefik 503 that was really a stale firewall address list
nvr.example.net returned a 503 through Traefik while the NVR was healthy on the LAN. The reverse proxy had moved to a Keepalived VIP, but the firewall address list that lets Traefik reach the NVR still named the old proxy IPs.