add: Traefik route for dsm.kavcorp.com

Added Synology DSM access via Traefik at dsm.kavcorp.com
Backend: http://10.4.2.13:5001 (DSM uses HTTP on this port)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 > **Purpose**: Historical record of all significant infrastructure changes
 
+## 2026-01-02
+
+### Synology DSM Traefik Route
+- Added Traefik route for `dsm.kavcorp.com` → KavNas DSM (10.4.2.13:5001)
+- Config: `/etc/traefik/conf.d/dsm.yaml`
+- Note: DSM is serving HTTP on port 5001 (not HTTPS), Traefik terminates TLS
+
 ## 2025-12-28
 
 ### Guest VLAN Traefik Access

docs/CONFIGURATIONS.md

@@ -141,6 +141,33 @@ http:
       insecureSkipVerify: true
 ```
 
+## Synology DSM
+
+**Location**: KavNas (Synology NAS)
+**IP**: 10.4.2.13:5001
+**Domain**: dsm.kavcorp.com
+
+**Traefik Config** (`/etc/traefik/conf.d/dsm.yaml`):
+```yaml
+http:
+  routers:
+    dsm:
+      rule: "Host(`dsm.kavcorp.com`)"
+      entryPoints:
+        - websecure
+      service: dsm
+      tls:
+        certResolver: letsencrypt
+
+  services:
+    dsm:
+      loadBalancer:
+        servers:
+          - url: "http://10.4.2.13:5001"
+```
+
+**Note**: DSM is configured for HTTP on port 5001 (not HTTPS). Traefik terminates TLS.
+
 ## AMP (Application Management Panel)
 
 **Location**: LXC 124 on elantris