Files
k8s-manifests/filebrowser/auth.yaml
chemavxandClaude Opus 4.8 318d66303a Remove plaintext htpasswd Secret from git (filebrowser)
Phase 3c of migration #2: drop the Secret stanza from auth.yaml; the Middleware
stays and references filebrowser-auth-infisical (synced from homelab/prod
/filebrowser). ArgoCD prunes the old plaintext filebrowser-auth secret — the
bcrypt htpasswd leaves git. Completes migration #2.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-19 20:52:24 +00:00

15 lines
517 B
YAML

---
# Basic-auth for files.chemavx.xyz. The htpasswd credentials are no longer in
# git — they live in Infisical (homelab/prod /filebrowser FILEBROWSER_USERS) and
# are synced into the Secret `filebrowser-auth-infisical` by the InfisicalStaticSecret
# in infisical-auth.yaml. This Middleware references that synced Secret.
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: filebrowser-auth
namespace: filebrowser
spec:
basicAuth:
secret: filebrowser-auth-infisical
realm: "Filebrowser"