Add CORS and OPTIONS handling for mtls-bridge panel actions

2026-04-14 11:06:45 +10:00
parent 85cf56fcaf
commit 7f8e920fa1
2 changed files with 15 additions and 0 deletions
@@ -16,6 +16,8 @@ Internal HTTP-to-mTLS bridge for services that cannot present client certificate
 - `CA_CERT` (default `/certs/ca.crt`): CA certificate bundle used to verify upstream TLS.
 - `TIMEOUT` (default `5`): request timeout in seconds.
 - `LOG_LEVEL` (default `INFO`): Python logging level.
+- `MTLS_BRIDGE_BASIC_AUTH_USERS` (required for Traefik auth): value for `traefik.http.middlewares.*.basicauth.users` (e.g. `user:$$apr1$$...`).
+- `MTLS_BRIDGE_CORS_ALLOW_ORIGIN` (default `https://grafana.lan.ddnsgeek.com`): origin allowed for browser-based panel actions.

 ## Endpoints