Add Traefik basic auth for rego-tunnel noVNC

- Remove websockify BasicHTTPAuth (doesn't trigger browser prompts)
- Add Traefik basicauth middleware instead (proper browser auth dialog)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/rego-tunnel/docker-compose.yml

@@ -42,10 +42,12 @@ services:
       traefik.http.routers.rego-tunnel-runtipi-insecure.entrypoints: web
       traefik.http.routers.rego-tunnel-runtipi-insecure.service: rego-tunnel-runtipi
       traefik.http.routers.rego-tunnel-runtipi-insecure.middlewares: rego-tunnel-runtipi-web-redirect
+      traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users: "alexz:$$2y$$05$$nv5ygL66/LEYut3RBuslFuXBwHIDg1yKFmhB8B4Nyqd8GJnN4gy5u"
       traefik.http.routers.rego-tunnel-runtipi.rule: Host(`${APP_DOMAIN}`)
       traefik.http.routers.rego-tunnel-runtipi.entrypoints: websecure
       traefik.http.routers.rego-tunnel-runtipi.service: rego-tunnel-runtipi
       traefik.http.routers.rego-tunnel-runtipi.tls.certresolver: myresolver
+      traefik.http.routers.rego-tunnel-runtipi.middlewares: rego-tunnel-runtipi-auth
       runtipi.managed: true
       runtipi.appurn: rego-tunnel:runtipi
     cap_add:

apps/rego-tunnel/shared/supervisord.conf

@@ -40,7 +40,7 @@ stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 
 [program:novnc]
-command=/usr/bin/websockify --web /usr/share/novnc 8006 localhost:5900 --auth-plugin BasicHTTPAuth --auth-source alexz:Az@83278327$$@@
+command=/usr/bin/websockify --web /usr/share/novnc 8006 localhost:5900 
 autostart=true
 autorestart=true
 priority=30