feat: herdr + agent network over netbird

hosts/m3-atlas/services/traefik.nix

@@ -37,6 +37,10 @@
         };
         websecure = {
           address = ":443";
+          # NetBird (signal/management gRPC, proxy mapping stream) requires
+          # long-lived HTTP/2 streams — see https://docs.netbird.io/selfhosted/maintenance/configuration-files
+          # Default readTimeout (60s) kills the streams every minute.
+          transport.respondingTimeouts.readTimeout = "0s";
         };
       };
     };
@@ -85,15 +89,6 @@
         };
 
         routers = {
-          # ── Hermes Dashboard — Netbird mesh only ─────────────────────
-          hermes-dashboard = {
-            rule = "Host(`dash.m3ta.dev`)";
-            service = "hermes-dashboard";
-            entrypoints = ["websecure"];
-            tls = {
-              certResolver = "godaddy";
-            };
-          };
           api = {
             rule = "Host(`r.m3tam3re.com`)";
             service = "api@internal";