Actually fix letsencrypt issue.

This commit is contained in:
Greyson Parrelli committed 2026-10-13 15:13:56 -04:00
1 parent 54b640aef0
commit ed7cd764be
3 files changed
+9 -2

No files matched your search

+1
View File
@@ -53,6 +53,7 @@ fn-ga-generate-conf "$APP" >"$CONF" || fail "conf generation failed"
grep -q 'proxy_pass http://myapp-5000;' "$CONF" || fail "conf should proxy to the app upstream"
grep -q 'auth_request /_google-auth/verify;' "$CONF" || fail "conf should gate with auth_request"
grep -qF 'location ~ ^/(?!\.well-known/acme-challenge(/|$)) {' "$CONF" || fail "catch-all should leave the letsencrypt challenge path alone"
grep -q 'location ^~ /api/webhooks {' "$CONF" || fail "conf should contain prefix exclusion"
grep -q 'location ~ ^/healthz$ {' "$CONF" || fail "conf should contain regex exclusion"
grep -q 'error_page 401 = @google_auth_signin;' "$CONF" || fail "conf should redirect 401s to signin"