From 5452c76ecb531b7787522f4521389512bad4800c Mon Sep 17 00:00:00 2001
From: Thomas Hintz <t@thintz.com>
Date: Sun, 31 Aug 2025 15:57:26 -0700
Subject: [PATCH] Encode logs/admin password automatically.

---
 make-caddyfile.sh | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/make-caddyfile.sh b/make-caddyfile.sh
index e4f0644..ed2c184 100755
--- a/make-caddyfile.sh
+++ b/make-caddyfile.sh
@@ -15,6 +15,9 @@ set -e
 
 . apps.config
 
+host_admin_password_encoded=`echo "$HOST_ADMIN_PASSWORD" | sudo docker run --rm -i caddy:2 caddy hash-password`
+
+
 read -r -a APP_CONFIGS <<< "$APP_CONFIGS"
 APP_CONFIGS+=('lb,root')
 
@@ -22,7 +25,13 @@ APP_CONFIGS+=('lb,root')
 declare -A bodys
 bodys["nextcloud"]="  reverse_proxy http://nextcloud:80"
 bodys["wg-easy"]="  reverse_proxy http://wg-easy:80"
-bodys["dozzle"]="  reverse_proxy http://dozzle:8080"
+bodys["dozzle"]=$(cat <<EOF
+  basic_auth {
+    $HOST_ADMIN_USER $host_admin_password_encoded
+  }
+  reverse_proxy http://dozzle:8080
+EOF
+)
 bodys["lb"]="  reverse_proxy http://nginx:80"
 
 for config_string in ${APP_CONFIGS[@]}; do