Remove plaintext htpasswd Secret from git (filebrowser)

Phase 3c of migration #2: drop the Secret stanza from auth.yaml; the Middleware
stays and references filebrowser-auth-infisical (synced from homelab/prod
/filebrowser). ArgoCD prunes the old plaintext filebrowser-auth secret — the
bcrypt htpasswd leaves git. Completes migration #2.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
2026-06-19 20:52:24 +00:00
co-authored by Claude Opus 4.8
parent 7e9ee295e4
commit 318d66303a
+4 -13
View File
@@ -1,17 +1,8 @@
--- ---
# Basic-auth credentials in htpasswd format (bcrypt-hashed). # Basic-auth for files.chemavx.xyz. The htpasswd credentials are no longer in
# Generated with: htpasswd -nbB chemavx <password> # git — they live in Infisical (homelab/prod /filebrowser FILEBROWSER_USERS) and
apiVersion: v1 # are synced into the Secret `filebrowser-auth-infisical` by the InfisicalStaticSecret
kind: Secret # in infisical-auth.yaml. This Middleware references that synced Secret.
metadata:
name: filebrowser-auth
namespace: filebrowser
type: Opaque
stringData:
users: |
chemavx:$2b$12$a1vb6zKuvbpvw8XWJk2ZYeAZtLGkJ.VsdOuMQhC5HmdC0cdnLzNhC
---
apiVersion: traefik.io/v1alpha1 apiVersion: traefik.io/v1alpha1
kind: Middleware kind: Middleware
metadata: metadata: