From 1ea99f191a8662e9aeb1c3e9a6fd0d6696f0338e Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Sun, 1 Nov 2026 09:26:42 +0900
Subject: studio: /healthz を認証なしにして status から監視する
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 caddy/Caddyfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'caddy/Caddyfile')

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index bbdaf35..ab7d955 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -52,7 +52,9 @@ todo.yyamashita.com {
 studio.yyamashita.com {
     import noindex
     # パスワードの平文はサーバーの /root/studio-basic-auth.txt（root のみ読める）
-    basic_auth {
+    # /healthz は status の死活監視用に認証なしで通す
+    @protected not path /healthz
+    basic_auth @protected {
         studio $2a$14$SIhdKTJ7lmZe/lYM2AP4Su0W4T1n4w5qLY6BBT4HDlpy/kYaVrR0C
     }
     reverse_proxy studio-app:8000
-- 
cgit v1.3