Phase 3c of migration #2: drop the Secret stanza from auth.yaml; the Middleware stays and references filebrowser-auth-infisical (synced from homelab/prod /filebrowser). ArgoCD prunes the old plaintext filebrowser-auth secret — the bcrypt htpasswd leaves git. Completes migration #2. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
15 lines
517 B
YAML
15 lines
517 B
YAML
---
|
|
# Basic-auth for files.chemavx.xyz. The htpasswd credentials are no longer in
|
|
# git — they live in Infisical (homelab/prod /filebrowser FILEBROWSER_USERS) and
|
|
# are synced into the Secret `filebrowser-auth-infisical` by the InfisicalStaticSecret
|
|
# in infisical-auth.yaml. This Middleware references that synced Secret.
|
|
apiVersion: traefik.io/v1alpha1
|
|
kind: Middleware
|
|
metadata:
|
|
name: filebrowser-auth
|
|
namespace: filebrowser
|
|
spec:
|
|
basicAuth:
|
|
secret: filebrowser-auth-infisical
|
|
realm: "Filebrowser"
|