From 318d66303a998c1de7aba35b510fcdfd9fd7f779 Mon Sep 17 00:00:00 2001
From: chemavx <chemavx@git.chemavx.xyz>
Date: Fri, 19 Jun 2026 20:52:24 +0000
Subject: [PATCH] Remove plaintext htpasswd Secret from git (filebrowser)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Phase 3c of migration #2: drop the Secret stanza from auth.yaml; the Middleware
stays and references filebrowser-auth-infisical (synced from homelab/prod
/filebrowser). ArgoCD prunes the old plaintext filebrowser-auth secret — the
bcrypt htpasswd leaves git. Completes migration #2.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 filebrowser/auth.yaml | 17 ++++-------------
 1 file changed, 4 insertions(+), 13 deletions(-)

diff --git a/filebrowser/auth.yaml b/filebrowser/auth.yaml
index cc43bf1..c743f6e 100644
--- a/filebrowser/auth.yaml
+++ b/filebrowser/auth.yaml
@@ -1,17 +1,8 @@
 ---
-# Basic-auth credentials in htpasswd format (bcrypt-hashed).
-# Generated with: htpasswd -nbB chemavx <password>
-apiVersion: v1
-kind: Secret
-metadata:
-  name: filebrowser-auth
-  namespace: filebrowser
-type: Opaque
-stringData:
-  users: |
-    chemavx:$2b$12$a1vb6zKuvbpvw8XWJk2ZYeAZtLGkJ.VsdOuMQhC5HmdC0cdnLzNhC
-
----
+# Basic-auth for files.chemavx.xyz. The htpasswd credentials are no longer in
+# git — they live in Infisical (homelab/prod /filebrowser FILEBROWSER_USERS) and
+# are synced into the Secret `filebrowser-auth-infisical` by the InfisicalStaticSecret
+# in infisical-auth.yaml. This Middleware references that synced Secret.
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata: