From ac2dd7ee4dd9742510f4fc3ded92e3f419f968f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Thu, 6 Nov 2025 17:27:04 +0100
Subject: [PATCH] fix: move Sablier middleware to dynamic configuration
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Moved Sablier middleware from Docker labels to Traefik dynamic configuration
to fix "unknown plugin type: sablier" error. Traefik plugins can only be
used in dynamic file configuration, not in Docker labels.

Changes:
- Removed sablier-vert@file reference from Docker label middleware chain
- Added complete router definition to proxy/dynamic/vert-sablier.yaml
- Router includes full middleware chain: sablier-vert → vert-auth → compress
- Kept sablier.enable and sablier.group labels for Sablier service discovery

This allows Sablier to properly scale the container to zero while maintaining
the middleware chain order through file-based configuration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 proxy/dynamic/vert-sablier.yaml | 13 +++++++++++++
 vert/compose.yaml               |  2 +-
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/proxy/dynamic/vert-sablier.yaml b/proxy/dynamic/vert-sablier.yaml
index 170ea72..58cbfef 100644
--- a/proxy/dynamic/vert-sablier.yaml
+++ b/proxy/dynamic/vert-sablier.yaml
@@ -9,3 +9,16 @@ http:
           dynamic:
             displayName: VERT File Converter
             theme: ghost
+
+  routers:
+    vert-web-secure:
+      rule: "Host(`vert.pivoine.art`)"
+      service: vert@docker
+      entryPoints:
+        - web-secure
+      middlewares:
+        - sablier-vert
+        - vert-auth@docker
+        - vert-web-secure-compress@docker
+      tls:
+        certResolver: resolver
diff --git a/vert/compose.yaml b/vert/compose.yaml
index 16de1b8..96f82d0 100644
--- a/vert/compose.yaml
+++ b/vert/compose.yaml
@@ -20,7 +20,7 @@ services:
       - 'traefik.http.routers.${VERT_COMPOSE_PROJECT_NAME}-web-secure.entrypoints=web-secure'
       - 'traefik.http.middlewares.${VERT_COMPOSE_PROJECT_NAME}-auth.basicauth.users=${VERT_AUTH_USERS}'
       - 'traefik.http.middlewares.${VERT_COMPOSE_PROJECT_NAME}-web-secure-compress.compress=true'
-      - 'traefik.http.routers.${VERT_COMPOSE_PROJECT_NAME}-web-secure.middlewares=sablier-vert@file,${VERT_COMPOSE_PROJECT_NAME}-auth,${VERT_COMPOSE_PROJECT_NAME}-web-secure-compress'
+      - 'traefik.http.routers.${VERT_COMPOSE_PROJECT_NAME}-web-secure.middlewares=${VERT_COMPOSE_PROJECT_NAME}-auth,${VERT_COMPOSE_PROJECT_NAME}-web-secure-compress'
       - 'traefik.http.services.${VERT_COMPOSE_PROJECT_NAME}-web-secure.loadbalancer.server.port=80'
       - 'traefik.docker.network=${NETWORK_NAME}'
       - 'sablier.enable=${VERT_SABLIER_ENABLED}'