summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoryyamashita <yyamashita@hetzner.yyamashita.com>2026-07-02 23:17:37 +0900
committeryyamashita <yyamashita@hetzner.yyamashita.com>2026-07-02 23:17:37 +0900
commit1a41762754f8897827f09b46b37ab234515039be (patch)
tree1ab4ecb614893c585968a16e94117c97acdeb532
parent1a7b5adf8484ec0f2b6feb350b578142e186ab26 (diff)
Temporarily disable proxy auth (PROXY_NO_AUTH=1)
Add PROXY_NO_AUTH env var support to entrypoint.sh to skip basicauth generation. Set to 1 in docker-compose.yml to allow unauthenticated access. Revert by removing the environment block from docker-compose.yml. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
-rw-r--r--caddy/docker-compose.yml2
-rw-r--r--caddy/entrypoint.sh4
2 files changed, 4 insertions, 2 deletions
diff --git a/caddy/docker-compose.yml b/caddy/docker-compose.yml
index e23d25a..cc2ba29 100644
--- a/caddy/docker-compose.yml
+++ b/caddy/docker-compose.yml
@@ -10,6 +10,8 @@ services:
- caddy_data:/data
- caddy_config:/config
- /app/infra/vpn/users.conf:/etc/proxy/users.conf:ro
+ environment:
+ - PROXY_NO_AUTH=1
restart: unless-stopped
networks:
- web
diff --git a/caddy/entrypoint.sh b/caddy/entrypoint.sh
index cf123ce..16edf36 100644
--- a/caddy/entrypoint.sh
+++ b/caddy/entrypoint.sh
@@ -3,9 +3,9 @@ set -e
PROXY_CONF=/tmp/proxy_forward.caddy
-# Build basicauth lines from shared users.conf
+# Build basicauth lines from shared users.conf (skip if PROXY_NO_AUTH=1)
AUTH_LINES=""
-if [ -f /etc/proxy/users.conf ]; then
+if [ "${PROXY_NO_AUTH:-0}" != "1" ] && [ -f /etc/proxy/users.conf ]; then
while IFS=' ' read -r user pass || [ -n "$user" ]; do
[ -z "$user" ] && continue
case "$user" in \#*) continue ;; esac