From fb7aab6991a8ae36e61b0b66896d8eb355c2bd93 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Kr=C3=BCger?= <valknar@pivoine.art>
Date: Thu, 6 Nov 2025 18:53:03 +0100
Subject: [PATCH] fix: use AUTH_USERS environment variable in VERT auth
 middleware
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Properly configured AUTH_USERS environment variable for Traefik container
to use in the vert-sablier.yaml dynamic configuration via Go templating.

Changes:
- Added AUTH_USERS environment variable to proxy compose file
- Updated vert-auth middleware to use {{ env AUTH_USERS }} template
- Fixed environment syntax to use map format instead of list format

This keeps credentials secure in the .env file (not tracked in git) while
the tracked vert-sablier.yaml file only contains the template reference.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 proxy/compose.yaml              | 3 +++
 proxy/dynamic/vert-sablier.yaml | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/proxy/compose.yaml b/proxy/compose.yaml
index 219bd62..304d5e0 100644
--- a/proxy/compose.yaml
+++ b/proxy/compose.yaml
@@ -56,6 +56,9 @@ services:
       retries: 3
       start_period: 10s
 
+    environment:
+      AUTH_USERS: ${AUTH_USERS}
+
     networks:
       - compose_network
 
diff --git a/proxy/dynamic/vert-sablier.yaml b/proxy/dynamic/vert-sablier.yaml
index 4965cb7..22a51d4 100644
--- a/proxy/dynamic/vert-sablier.yaml
+++ b/proxy/dynamic/vert-sablier.yaml
@@ -13,7 +13,7 @@ http:
     vert-auth:
       basicAuth:
         users:
-          - valknar:$apr1$mPI9lhER$CIz4BtA8cQULi4McVZxfz.
+          - "{{ env AUTH_USERS }}"
 
     vert-compress:
       compress: {}