From 21a00c23c3111612ba826dc15a10f58fe012cd5d Mon Sep 17 00:00:00 2001
From: stevensting <stefan@klasse-methode.it>
Date: Sun, 28 Jun 2026 11:32:16 +0200
Subject: [PATCH 1/2] add basicauth

---
 .env.sample           |  4 ++++
 compose.basicauth.yml | 16 ++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 compose.basicauth.yml

diff --git a/.env.sample b/.env.sample
index 8a07293..2de110c 100644
--- a/.env.sample
+++ b/.env.sample
@@ -36,6 +36,10 @@ DB_DOCKER_IMAGE=ghcr.io/baosystems/postgis:${DB_DOCKER_VERSION}
 # TODO: maybe to use for Upgrading to a new Postgres version? (NOTE: does not work with postgis data)
 # DB_DOCKER_IMAGE=pgautoupgrade/pgautoupgrade:16-alpine
 
+## BASIC_AUTH
+## Use 'echo $(htpasswd -nB username)' to generate the secret and store it in secret 'usersfile', multiple user/hashedpassword combinations can be added as comma separated list
+#COMPOSE_FILE="$COMPOSE_FILE:compose.basicauth.yml"
+#SECRET_USERSFILE_VERSION=v1
 
 # enter your instance's domain name
 DOMAIN=bonfire.example.com
diff --git a/compose.basicauth.yml b/compose.basicauth.yml
new file mode 100644
index 0000000..0211838
--- /dev/null
+++ b/compose.basicauth.yml
@@ -0,0 +1,16 @@
+version: "3.8"
+services:
+  app:
+    environment:
+      - BASIC_AUTH
+    secrets:
+      - usersfile
+    deploy:
+      labels:
+        - "traefik.http.middlewares.${STACK_NAME}_basicauth.basicauth.usersFile=/run/secrets/usersfile"
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}_basicauth"
+
+secrets:
+  usersfile:
+    name: ${STACK_NAME}_usersfile_${SECRET_USERSFILE_VERSION}
+    external: true
\ No newline at end of file
-- 
2.52.0


From 197c18a9b23d26201be23163e68489d07327ab7f Mon Sep 17 00:00:00 2001
From: stevensting <stefan@klasse-methode.it>
Date: Sun, 28 Jun 2026 11:36:46 +0200
Subject: [PATCH 2/2] remove unused env var

---
 compose.basicauth.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/compose.basicauth.yml b/compose.basicauth.yml
index 0211838..ed0278d 100644
--- a/compose.basicauth.yml
+++ b/compose.basicauth.yml
@@ -1,8 +1,6 @@
 version: "3.8"
 services:
   app:
-    environment:
-      - BASIC_AUTH
     secrets:
       - usersfile
     deploy:
-- 
2.52.0