Remove plaintext htpasswd Secret from git (filebrowser)
Phase 3c of migration #2: drop the Secret stanza from auth.yaml; the Middleware stays and references filebrowser-auth-infisical (synced from homelab/prod /filebrowser). ArgoCD prunes the old plaintext filebrowser-auth secret — the bcrypt htpasswd leaves git. Completes migration #2. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
+4
-13
@@ -1,17 +1,8 @@
|
|||||||
---
|
---
|
||||||
# Basic-auth credentials in htpasswd format (bcrypt-hashed).
|
# Basic-auth for files.chemavx.xyz. The htpasswd credentials are no longer in
|
||||||
# Generated with: htpasswd -nbB chemavx <password>
|
# git — they live in Infisical (homelab/prod /filebrowser FILEBROWSER_USERS) and
|
||||||
apiVersion: v1
|
# are synced into the Secret `filebrowser-auth-infisical` by the InfisicalStaticSecret
|
||||||
kind: Secret
|
# in infisical-auth.yaml. This Middleware references that synced Secret.
|
||||||
metadata:
|
|
||||||
name: filebrowser-auth
|
|
||||||
namespace: filebrowser
|
|
||||||
type: Opaque
|
|
||||||
stringData:
|
|
||||||
users: |
|
|
||||||
chemavx:$2b$12$a1vb6zKuvbpvw8XWJk2ZYeAZtLGkJ.VsdOuMQhC5HmdC0cdnLzNhC
|
|
||||||
|
|
||||||
---
|
|
||||||
apiVersion: traefik.io/v1alpha1
|
apiVersion: traefik.io/v1alpha1
|
||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
Reference in New Issue
Block a user