From 0e9865950609f0d87e27e8b34b6d04bd16929126 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Thu, 12 Feb 2026 17:58:25 +0100
Subject: [PATCH] fix(infra): prevent redirect loop by excluding gatekeeper
 path from app router

---
 .gitea/workflows/deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index c513e2a..3a764c7 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -271,6 +271,8 @@ jobs:
             AUTH_MIDDLEWARE="$STD_MW"
             COMPOSE_PROFILES=""
           else
+            # Exclude Gatekeeper from the main app router to prevent redirect loops
+            TRAEFIK_RULE="Host(\`${TRAEFIK_HOST}\`) && !PathPrefix(\`/gatekeeper\`)"
             # Order: Forward (Proto) -> Auth -> Compression
             AUTH_MIDDLEWARE="${PROJECT_NAME}-forward,${PROJECT_NAME}-auth,compress"
             COMPOSE_PROFILES="gatekeeper"