SimpleAuth + octoprint webcam

homelab/Caddyfile

@@ -5,12 +5,10 @@
   #acme_ca https://acme-staging-v02.api.letsencrypt.org/directory
 }
 
-import /run/secrets/caddy-users
-
 (restricted-access) {
   forward_auth simpleauth:8080 {
     uri /
-    copy_headers Set-Cookie
+    copy_headers X-Simpleauth-Token
   }
 }
 
@@ -60,6 +58,13 @@ deergrove.woozle.org, sweetums.woozle.org {
       header_up X-Script-Name "/octoprint"
     }
   }
+  handle /webcam/* {
+    # Octoprint doesn't properly prefix webcam URLs
+    import restricted-access
+    reverse_proxy {
+      to 192.168.86.36:80
+    }
+  }
   handle {
     import restricted-access
     file_server {

homelab/docker-compose.yaml

@@ -22,20 +22,17 @@ services:
         target: /etc/caddy/Caddyfile
       - source: index.html
         target: /www/index.html
-    secrets:
-      - caddy-users
     extra_hosts:
       - host.docker.internal:host-gateway
 
   simpleauth:
     image: ghcr.io/nealey/simpleauth
-    volumes:
+    command:
-      - type: bind
+      - -secret
-        source: /home/neale/src/simpleauth/static
+      - /run/secrets/simpleauth.key
-        target: /static
-        read_only: true
     secrets: 
       - passwd
+      - simpleauth.key
 
   plex:
     image: ghcr.io/linuxserver/plex
@@ -151,18 +148,18 @@ configs:
     name: dave.yaml-v3
   Caddyfile:
     file: Caddyfile
-    name: Caddyfile-v27
+    name: Caddyfile-v35
   index.html:
     file: index.html
     name: index.html-v12
 
 secrets:
-  caddy-users:
-    file: secrets/caddy-users
-    name: caddy-users-v2
   passwd:
     file: secrets/passwd
     name: passwd-v1
+  simpleauth.key:
+    file: secrets/simpleauth.key
+    name: simpleauth.key-v1
 
 networks:
   hostnet: