Staging runs on a private-network VM, not reachable from outside, so the HTTP basic-auth layer was unnecessary defense-in-depth. Removing it also lets the Caddyfile drop the render-around-Compose workaround entirely (that workaround existed specifically because Compose's interpolation mangles a bcrypt hash) — the noindex header and blog_public=0 stay, since those guard against search-engine indexing, a separate concern from network-level access. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
10 lines
78 B
Plaintext
10 lines
78 B
Plaintext
/.env
|
|
/.env.*
|
|
!/.env.example
|
|
|
|
/backups/
|
|
vendor/
|
|
node_modules/
|
|
*.log
|
|
.DS_Store
|