From 865a96c2ec7f0d517d0bf72bede70b1bb5ae7cb2 Mon Sep 17 00:00:00 2001
From: alexz <me@alexzaw.dev>
Date: Fri, 16 Jan 2026 19:55:48 +0000
Subject: [PATCH] fix(rego-tunnel): Remove Traefik basic auth

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 apps/rego-tunnel/config.json         | 11 +----------
 apps/rego-tunnel/docker-compose.json |  2 --
 apps/rego-tunnel/docker-compose.yml  |  4 ++--
 3 files changed, 3 insertions(+), 14 deletions(-)

diff --git a/apps/rego-tunnel/config.json b/apps/rego-tunnel/config.json
index 6be828e..6a434a6 100755
--- a/apps/rego-tunnel/config.json
+++ b/apps/rego-tunnel/config.json
@@ -6,7 +6,7 @@
   "dynamic_config": true,
   "id": "rego-tunnel",
   "description": "Cisco Secure Client VPN in Docker with noVNC web UI for accessing Rego environments. No VM overhead.",
-  "tipi_version": 4,
+  "tipi_version": 5,
   "version": "5.1.14.145",
   "categories": ["utilities"],
   "short_desc": "Cisco VPN tunnel to Rego environments (native Docker, no VM)",
@@ -65,15 +65,6 @@
       "required": false,
       "env_variable": "VNC_PASSWORD",
       "default": "cisco123"
-    },
-    {
-      "type": "text",
-      "label": "Basic Auth Users",
-      "hint": "Traefik basic auth users string (htpasswd format). Use generate-traefik-basicauth.sh to create.",
-      "placeholder": "user:$$apr1$$hash",
-      "required": false,
-      "env_variable": "BASICAUTH_USERS",
-      "default": ""
     }
   ],
   "supported_architectures": ["amd64"]
diff --git a/apps/rego-tunnel/docker-compose.json b/apps/rego-tunnel/docker-compose.json
index 0b485c3..8a82a5a 100755
--- a/apps/rego-tunnel/docker-compose.json
+++ b/apps/rego-tunnel/docker-compose.json
@@ -69,8 +69,6 @@
       ],
       "isMain": true,
       "extraLabels": {
-        "traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users": "${BASICAUTH_USERS}",
-        "traefik.http.routers.rego-tunnel-runtipi.middlewares": "rego-tunnel-runtipi-auth",
         "runtipi.managed": true
       }
     }
diff --git a/apps/rego-tunnel/docker-compose.yml b/apps/rego-tunnel/docker-compose.yml
index 0e4c70d..96bcc7d 100755
--- a/apps/rego-tunnel/docker-compose.yml
+++ b/apps/rego-tunnel/docker-compose.yml
@@ -20,6 +20,7 @@ services:
     volumes:
       - ${APP_DATA_DIR}/config:/config
       - /etc/runtipi/user-config/runtipi/rego-tunnel/shared:/shared
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
     labels:
       generated: true
       traefik.enable: true
@@ -30,12 +31,10 @@ services:
       traefik.http.routers.rego-tunnel-runtipi-insecure.entrypoints: web
       traefik.http.routers.rego-tunnel-runtipi-insecure.service: rego-tunnel-runtipi
       traefik.http.routers.rego-tunnel-runtipi-insecure.middlewares: rego-tunnel-runtipi-web-redirect
-      traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users: "${BASICAUTH_USERS}"
       traefik.http.routers.rego-tunnel-runtipi.rule: Host(`${APP_DOMAIN}`)
       traefik.http.routers.rego-tunnel-runtipi.entrypoints: websecure
       traefik.http.routers.rego-tunnel-runtipi.service: rego-tunnel-runtipi
       traefik.http.routers.rego-tunnel-runtipi.tls.certresolver: myresolver
-      traefik.http.routers.rego-tunnel-runtipi.middlewares: rego-tunnel-runtipi-auth
       runtipi.managed: true
       runtipi.appurn: rego-tunnel:runtipi
     cap_add:
@@ -43,4 +42,5 @@ services:
     devices:
       - /dev/net/tun
     privileged: true
+    cgroup: host
     stop_grace_period: 30s