From d5e58923bc41cc86c52550a3abbea20392a6fb12 Mon Sep 17 00:00:00 2001
From: alexz <me@alexzaw.dev>
Date: Thu, 26 Mar 2026 23:30:48 +0000
Subject: [PATCH] Add PROXY_SECRET for IBM i proxy auth

---
 apps/erp-integration/config.json        | 9 +++++++++
 apps/erp-integration/docker-compose.yml | 1 +
 2 files changed, 10 insertions(+)

diff --git a/apps/erp-integration/config.json b/apps/erp-integration/config.json
index b573e07..9044ea1 100644
--- a/apps/erp-integration/config.json
+++ b/apps/erp-integration/config.json
@@ -88,6 +88,15 @@
       "required": false,
       "default": "",
       "env_variable": "CONTEXT_ROOT"
+    },
+    {
+      "type": "password",
+      "label": "Proxy Auth Secret",
+      "hint": "Shared secret for trusted reverse proxy authentication (X-Proxy-Secret header). Leave empty to allow unauthenticated access.",
+      "required": false,
+      "env_variable": "PROXY_SECRET",
+      "min": 0,
+      "max": 200
     }
   ]
 }
\ No newline at end of file
diff --git a/apps/erp-integration/docker-compose.yml b/apps/erp-integration/docker-compose.yml
index e7b2af1..4234db7 100644
--- a/apps/erp-integration/docker-compose.yml
+++ b/apps/erp-integration/docker-compose.yml
@@ -22,6 +22,7 @@ services:
       - OLLAMA_MODEL=${OLLAMA_MODEL}
       - OLLAMA_API_KEY=${OLLAMA_API_KEY}
       - CONTEXT_ROOT=${CONTEXT_ROOT}
+      - PROXY_SECRET=${PROXY_SECRET}
     healthcheck:
       test: curl --fail http://localhost:8001$${CONTEXT_ROOT}/api/health || exit 1
       interval: 30s